As cited
Copy frozen at (site build).
threat intel
ClickFix attacks infecting PCs and Macs are going viral
ClickFix attacks, which trick users into running malicious terminal commands through fake CAPTCHA overlays on compromised websites, have shifted from niche technique to widespread adoption across threat actors and criminal groups. The attack's simplicity and high success rate have made it mainstream, with reports of infections spreading rapidly across social media platforms and legitimate websites being hacked to serve the malicious prompts. Casual users have become desensitized to suspicious instructions due to the general difficulty and friction of modern web interfaces.
Why it matters: All PC and Mac users are vulnerable to ClickFix social engineering attacks on compromised or hacked websites; practitioners must update endpoint security rules, user awareness training, and monitoring to detect unusual terminal command execution and guide users to verify prompts through official channels.
- Source published
- First seen by Cybersecurity Tracker