Malware delivery

14 posts

Malware delivery has moved into the browser: rather than email attachments, attackers now rely on malvertising, fake install guides, and ClickFix-style copy-paste lures to get code running on endpoints. Push research on techniques like InstallFix maps the playbook, and in-browser detection of malicious copy and paste blocks these attacks before commands reach the endpoint.

AI attacks Public breach Legitimate service abuse

Browser threat landscape: mid-year update 2026

PhaaS industrialization, Scattered Spider copycats, and AI-augmented tooling — what the threat landscape looks like in 2026 so far.

Thought leadership

Dan

Aug 10, 2026

// Read

Browser attacks AI Phishing

LLMShare: how attackers are turning AI chatbot pages into malware delivery platforms

How attackers are using shared content features on AI chatbot platforms to deliver malware via pages hosted on legitimate domains, sent via malvertising.

Threat research

Keanu

May 29, 2026

// Read

Browser attacks Phishing Identity security

7 things we learned from ‘Why the browser is the new battleground’ with John Hammond

Here are 7 things we learned from our conversation with John Hammond on the "Why the browser is the new battleground" webinar.

Thought leadership

Daniel

May 19, 2026

// Read

Featured Browser security AI Detection & response

Can AI replace a threat researcher? What we learned building an agentic threat hunting pipeline

How we built an end-to-end threat hunting and detection engineering capability at Push that uses AI agents as a force multiplier.

Thought leadership

Kelly

May 12, 2026

// Read

Featured Browser attacks Identity security Phishing

Introducing the Browser & Identity Attacks Matrix

We're re-releasing the SaaS attack matrix as the Browser & Identity Attacks Matrix. Here's why we've decided to make the change and what it means.

Thought leadership

Dan

May 8, 2026

// Read

Browser attacks Browser security Phishing

Guide: How to use Push controls to protect your users from modern browser threats

How to use in-browser controls to stop browser-based attacks before compromise can occur

Guide

Kelly

Apr 8, 2026

// Read

Browser security Browser extensions ClickFix

Product release: March 2026

Here’s what’s new on the Push platform for March 2026.

Release notes

Andy

Mar 10, 2026

// Read

Browser attacks Phishing Detection & response

InstallFix: How attackers are weaponizing malvertised install guides

Attackers are impersonating popular developer tools like Claude Code to distribute fake install instructions via malicious search engine ads.

Threat research

Jacques

Mar 6, 2026

// Read

Browser attacks Phishing Detection & response

The most advanced ClickFix yet?

Breaking down the most sophisticated ClickFix page we’ve seen in the wild — and what it tells us about the future of malicious copy-and-paste attacks.

Threat research

Dan

Nov 6, 2025

// Read

Browser attacks Detection & response Browser security

Introducing malicious copy and paste detection

Push now detects malware delivery in the browser, supporting a layered defense against endpoint attacks.

Product feature

Dan

Oct 9, 2025

// Read

Browser attacks Identity security Browser security

6 browser-based attacks every security team should be prepared for

What security teams need to know about the browser-based attack techniques that are the leading cause of breaches.

Thought leadership

Dan

Sep 5, 2025

// Read

Browser attacks Phishing Detection & response

Detecting phishing pages using obfuscated URL destinations

Push now blocks URL schema obfuscation, countering a common technique used by attackers to bypass URL detections for phishing pages and malicious IPs.

Product feature

Dan

Jul 1, 2025

// Read

Browser attacks Identity security Threat landscape

What the rise of infostealers says about identity attacks

What the rise in popularity of infostealers tells us about the cybercrime ecosystem and the shift toward identity attacks.

Threat research

Dan

Jul 31, 2024

// Read

Browser attacks Phishing Identity security

Phishing Microsoft Teams for initial access

In this article, we will cover a number of spoofing and phishing strategies that can be employed by external attackers to target an organization using Teams.

Threat research

Luke

Jan 23, 2024

// Read

Malware delivery

Subscribe to get updates from Push