Documentation Placeholder Domain Used in ClickFix Attacks

Documentation placeholder domain used in ClickFix attacks

The domain name third-party[.]com is being used to serve malware to users — bad news for those following a little too literally online documentation that uses it as a placeholder for any third-party domain. The site is serving a ClickFix lure to Windows machines, which sidesteps existing protection and can effect changes to PowerShell, according to Manifold Security, which discovered the problem. It’s an interesting site to target. Web developer…

Placeholder domain in 1,700+ repos now delivering malicious content

A domain used as a sample third-party reference across more than 1,700 public code repositories has been repurposed to serve malicious material, creating a supply-chain style exposure for projects that left the placeholder active in production...

A Placeholder Domain's Dangerous Second Life: How third-party.com Became a ClickFix Trap

A long-trusted placeholder domain in developer docs now serves ClickFix attacks via fake Cloudflare checks. Over 1,700 repositories reference third-party.com, exposing Windows users to clipboard poisoning and PowerShell execution. The incident highlights persistent supply chain risks from outdated examples.

Placeholder domain used in dev docs now serves ClickFix attacks

The "third-party.com" domain, commonly used as a placeholder in developer documentation and code examples, is serving a fake Cloudflare verification page that attempts to trick Windows users into executing PowerShell commands. [...]

Documentation placeholder domain used in ClickFix attacks | #cybercrime | #infosec - National Cyber Security Consulting

The domain name third-party[.]com is being used to serve malware to users — bad news for those following a little too literally online documentation that uses it as a placeholder for any third-party domain. The site is serving a ClickFix lure to Windows machines, which sidesteps existing protection and can effect changes to PowerShell, according […] Thank you for subscribing to our RSS feed!

Placeholder Domain Third-party.com Now Serves ClickFix Malware

The long-trusted documentation placeholder domain “third-party[.]com” has been weaponized to serve a ClickFix malware lure to Windows users. Unlike “example[.]com,” […]