Cisco Talos says ClickFix attackers used Google Sheets to deliver cryptocurrency-stealing browser code

Attackers are using fake troubleshooting prompts to trick people into pasting malicious code from a Google Sheet into their browser, leading to cryptocurrency theft. Cisco Talos says the campaign uses a ClickFix-style social-engineering lure and abuses a legitimate Google service as delivery infrastructure; the pasted code alters transaction pages in Chrome or helps install a malicious browser extension to steal or manipulate crypto transactions.