ClickFix Attacks Move to Mainstream with Fake CAPTCHA Tactics
ClickFix has become a mainstream malware delivery method that tricks users into pasting a single malicious command from a fake CAPTCHA overlay on compromised sites, bypassing code-signing and Gatekeeper protections and enabling infections on Windows and macOS; campaigns span Google Sheets-based control and blockchain-hosted infrastructure, with about 5,400 sites involved, but defenders like BlockBlock and uBlock offer mitigations, and researchers urge awareness over user-blaming.
