GoKawiilClickFix social engineering attacks spread across Windows and macOS
Security researchers report that ClickFix-style attacks, which trick users into copying and running malicious commands via fake CAPTCHA pop-ups, are proliferating across both Windows and Mac systems. Researcher Kevin Beaumont notes victims are flooding Reddit for help, and attackers are now compromising legitimate websites to embed these prompts, making the scam harder to spot.
GoKawiil's interpretation of the reporting above, not reported fact.
ClickFix lowers the barrier for cybercriminals since it avoids the need for complex infrastructure like compromised servers or rotating command-and-control domains, relying instead on user error. Its adoption by state-sponsored groups and appearance in everyday tools like Google Sheets shows how mainstream and dangerous this simple technique has become.
- ClickFix uses fake CAPTCHA prompts to trick users into running malicious commands manually.
- Attackers are compromising trusted websites to embed these attacks, increasing their reach.
- State-sponsored hacking groups have adopted ClickFix due to its low infrastructure requirements.
Source: techspot.com — Alfonso Maruccia, 2026-09-14
Published there as: “ClickFix-based attacks are becoming widespread on both PC and Mac”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.