Ukrainian Business Websites Hijacked to Distribute Psychedelic Stealer via Fake CAPTCHA

Attackers hijacked Ukrainian business websites to distribute Psychedelic Stealer malware through a ClickFix campaign. The attackers injected hidden iframes into legitimate pages of compromised Ukrainian websites, including a hair-treatment site, which displayed fake Cloudflare CAPTCHA verification screens to visitors. The malicious CAPTCHA prompts were used to install Psychedelic Stealer, which steals browser credentials and cryptocurrency credentials from infected systems.