ClickFix attacks infecting PCs and Macs are going viral

A dangerous social engineering technique known as 'ClickFix' is rapidly spreading across the internet, targeting both Windows and macOS users. The attack involves compromising legitimate websites to display fake CAPTCHA overlays that trick visitors into copying and executing malicious terminal commands. Security researchers, including Kevin Beaumont, report that this method has become a preferred tool for various threat actors, including state-sponsored hacking groups, due to its simplicity and high success rate. The surge in infections is attributed to user desensitization; modern web experiences are so cluttered with intrusive interstitials and complex CAPTCHAs that many users have become conditioned to follow absurd instructions without suspicion. As these attacks proliferate, experts warn that the burden of navigating increasingly difficult web interfaces is making casual users more vulnerable to sophisticated malware delivery tactics.