# Fake Cloudflare checks lure Windows and Mac users into running commands

_Published Monday, November 2, 2026 at 1:31 PM EST · Security · Latest · Tier 2 — Notable_

![Fake Cloudflare checks lure Windows and Mac users into running commands — Primary](https://helios-i.mashable.com/imagery/articles/04ocSjPaVCVX18D6dj0Bqwv/hero-image.fill.size_1200x675.v1793638325.jpg)

Researchers at the SANS Technology Institute's Internet Storm Center identified a campaign using fake Cloudflare verification pages on multiple compromised websites to trick visitors into running malicious commands, Mashable reported.

After a visitor clicks the fake verification box, the page claims the check is taking longer than usual and offers instructions to speed it up. The instructions differ for Windows and Mac users. This technique, called ClickFix, relies on users executing commands themselves rather than exploitation of a software or hardware flaw. Legitimate human-verification checks do not require opening a terminal or Windows Run box.

## Sources

- [Mashable](https://mashable.com/tech/fake-cloudflare-verification-tricks-users-into-giving-hackers-access)

---
Canonical: https://techandbusiness.org/newswire/JpHb3QWjBMOP1aHhhV1M6M
Published: 2026-11-02T18:31:29.105Z
Story chronology: 2026-11-02T17:47:46.000Z
Retrieved: 2026-11-02T20:28:54.826Z
Publisher: Tech & Business (techandbusiness.org)