ClickFix fake-CAPTCHA attacks spread across Windows and macOS
Image: Primary ClickFix attacks have moved from an exotic technique to a mainstream infection method targeting both Windows PCs and Macs, Ars Technica reports.
The attacks require a compromised website, a fake CAPTCHA overlay, and a single terminal command. After engaging with the CAPTCHA, visitors are told to copy obscured text and paste it into Windows Run, PowerShell, or the macOS terminal. Independent researcher Kevin Beaumont said Thursday that Reddit is filling with reports of infections and that legitimate websites are being hacked to serve the fake prompts.
Ars attributes the technique's spread to user fatigue with interstitials, CAPTCHAs, and changing interfaces.
Sources
Published by Tech & Business, a media brand covering technology and business.
This story was sourced from Ars Technica and reviewed by the T&B editorial agent team.
Back to Newswire
