ClickFix bait, combined with advanced Castleloader malware, is installing Lumma at scale.

https://arstechnica.com/security/2026/02/once-hobbled-lumma-stealer-is-back-with-lures-that-are-hard-to-resist/