‘Prove you are not a robot’: how the Captcha scam captures your computer
Unlike familiar Captcha tests, this con asks you to press a series of keys. And that’s a way in for fraudsters to install malicious software You are looking for some gifts for Christmas and want to support small businesses when you shop. When you visit the site of one you’ve heard good things about you are asked to verify that you are human. Instead of clicking on a series of images, or typing…
The “ClickFix” scam is a popular method used by cybercriminals to infect people's computers with malicious software. Unlike traditional Captcha tests, which typically involve identifying images or typing distorted letters, this scam asks users to press a series of keys on their keyboard.
When shopping for gifts during the holidays, you may encounter a website that requests verification of your humanity. Instead of the usual image-based test, you are prompted to press and hold the Windows Key + R, paste a specific keyboard shortcut using Ctrl + V, and press Enter. This combination of actions allows the system to copy malicious code to your computer's clipboard, ultimately infecting your system.
Chris Fistonich, a researcher at the cybersecurity company Malwarebytes, explains that the ClickFix scam is one of the most sophisticated malware campaigns currently in use. People are often caught off guard by this type of attack, as they are accustomed to solving Captchas and trusting their security software. This new security loophole has proven to be extensively exploited by criminals.
To protect yourself, pause and think before acting when online. Ensure you have reliable security software in place to block malicious websites and traps. If you suspect your computer has been compromised, contact your bank immediately and change your passwords, starting with the most important accounts.
Written by urgent.news from Guardian Business's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
