That ‘verify you are human’ pop

Cybersecurity experts from IBM and Microsoft are warning users about a new social engineering attack called ClickFix. The technique tricks users into running malicious commands by disguising them as routine 'verify you are human' pop-up prompts.
Why it matters
This attack exploits human trust in common security interfaces, potentially leading to widespread account hijacking and malware infections for both enterprise and individual users.
Cybersecurity experts from IBM Canada and Microsoft Canada warn that a fast-growing cyberattack called ClickFix is hiding inside routine-looking “verify you are human” prompts. Here's how to spot it.
Cybersecurity experts from IBM Canada and Microsoft Canada warn that a fast-growing cyberattack called ClickFix is hiding inside routine-looking “verify you are human” prompts. Here’s how to spot it.
A person looking at an example of an actual ClickFix dialog box with instructions that tricks them into infecting their own device with malware.
Facebook Twitter WhatsApp SMS Email Print Copy article link Save A fast-growing cyberattack called ClickFix is tricking thousands of users worldwide into becoming unwitting accomplices — infecting their own devices with dangerous malware that lets hackers hijack accounts or silently take over the computer.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in