ClickFix Malware Scam Goes Mainstream: Fake CAPTCHA Tests Trick Users Into Infecting Their PCs

Summary

The article reports on the "ClickFix" malware scam, a social engineering attack that tricks website visitors into pressing keyboard shortcuts that download password-stealing malware. Originally spotted in targeted attacks last year, the scheme has now gone mainstream. It mimics legitimate CAPTCHA "Verify You are a Human" tests, using fake popups that instruct users to press key combinations (like Windows key + R or Ctrl+V) to execute malicious code that infects their system with information-stealing malware.

Source

bskyClickFix Malware Scam Goes Mainstream: Fake CAPTCHA Tests Trick Users Into Infecting Their PCskrebsonsecurity.com