Compromised Ukrainian Websites Distribute Malware Under the Guise of Cloudflare

An active ClickFix campaign has compromised legitimate Ukrainian business websites, injected fake Cloudflare verification pages, and tricked visitors into downloading the previously undocumented information stealer Psychedelic Stealer. The same source also describes a separate ClickFix chain delivering the RemotePanel and BoundSiphon malware components.