ClickFix attacks infecting PCs and Macs are going viral
First reported Fri, 11 Sep 2026 11:30:58 GMT · Last updated
It wasn’t that long ago that ClickFix attacks were exotic. Now the technique has become mainstream as attackers reap its simplicity and effectiveness in infecting users of PCs and Macs alike. All that’s required is a compromised website—a painless enough task—a fake CAPTCHA overlay, and the inclusion of a single terminal command. So many visitors get suckered into pasting and running the command that just about every malware pusher has adopted the technique. Even Kremlin-backed hacking groups are joining in. “Reddit is becoming post after post after post of people getting their computer infected via ClickFix,” independent researcher Kevin Beaumont observed Thursday . “Legit websites everywhere [are] getting hacked to serve the fake captcha prompts.” How many of us make things worse More seasoned Internet users—a fair number who read this site—are quick to dismiss the attack. They typically blame the people who fall for the scams and marvel at their gullibility and lack of attention. The reality is that for more casual users, using computers and the Internet has become so difficult—think impossible-to-close interstitials, CAPTCHAs with an endless series of pictures to analyze, and c
1 source in this cluster
- Ars TechnicaClickFix attacks infecting PCs and Macs are going viral
It wasn’t that long ago that ClickFix attacks were exotic. Now the technique has become mainstream as attackers reap its simplicity and effectiveness in infecting users of PCs and Macs alike. All that’s required is a compromised website—a painless enough task—a fake CAPTCHA overlay, and the inclusion of a single terminal command. So many visitors get suckered into pasting and running the command that just about every malware pusher has adopted the technique. Even Kremlin-backed hacking groups are joining in. “Reddit is becoming post after post after post of people getting their computer infected via ClickFix,” independent researcher Kevin Beaumont observed Thursday . “Legit websites everywhere [are] getting hacked to serve the fake captcha prompts.” How many of us make things worse More seasoned Internet users—a fair number who read this site—are quick to dismiss the attack. They typically blame the people who fall for the scams and marvel at their gullibility and lack of attention. The reality is that for more casual users, using computers and the Internet has become so difficult—think impossible-to-close interstitials, CAPTCHAs with an endless series of pictures to analyze, and c
Fri, 11 Sep 2026 11:30:58 GMT
Timeline
- 2026-09-11 11:30Ars Technica — ClickFix attacks infecting PCs and Macs are going viral
How to read this page
- Headlines, quotes and facts come from the linked original articles (reporting).
- "Newsei analysis" and "Why it matters" are AI-assisted synthesis (inference).
- "Confirmed" means two or more independent outlets reported the same claim.
Methodology · Source profiles & bias labels · Corrections policy · Report an error: info@newsei.com
Share this timeline
Embed shows this story's live timeline on your own site and links back here.