Meet DriveSurge: A New Threat Actor Using ClickFix and Fake Update Drive-By Attacks in Thousands of Compromised Sites

DriveSurge is a stealthy, highly automated threat actor that has compromised thousands of legitimate websites to deliver malware at scale via sophisticated drive-by attacks, using zTDS infrastructure and pay-per-install models to supply downstream cybercriminals with high-quality victim leads.