Breach404
Back to Insights
Cybersecurity2 min readAugust 3, 2026

New DOUBLECUP ClickFix service hides malware in browser cache images

Attackers are using a new service called DOUBLECUP that disguises malware as cached browser images to trick users into downloading dangerous loaders and remote access trojans on both Windows and macOS systems. You should be suspicious of unexpected pop-up

Could your website be vulnerable to attacks like this?

Run a free 10-point security scan on your site - headers, SSL, DNS, and more. Results in 15 seconds.

Test Your Site Now - It's Free