TI Mindmap HUB
Threat Intelligence Report

ClickFix via Cloudflare Zaraz and the BW Panel

📅 August 26, 2026 📰 www.derp.ca 🔍 0 CVE(s) referenced

A sophisticated malware campaign abused Cloudflare Zaraz on a compromised website to stealthily deliver the BW Panel loader, which used blockchain-based EtherHiding to dynamically obtain its control server, encrypted its communications, and deployed deceptive modules like fake Cloudflare verification screens as part of the ErrTraffic ClickFix operation.

unclassified

Sign in to access the full report including:
detailed analysis, IOCs, MITRE ATT&CK mapping, and STIX bundle.

🔐 Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

📊 Visual Mindmap
🎯 IOC Extraction
⚔️ MITRE ATT&CK TTPs
📦 STIX 2.1 Bundle