{
  "id": 20154497,
  "title": "‘Prove you are not a robot’: how the Captcha scam captures your computer",
  "url": "https://urgent.news/2026/11/15/prove-you-are-not-a-robot-how-the-captcha-scam-captures-your-computer-20154497",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-11-15T07:00:06.000Z",
  "source": {
    "name": "Guardian Technology",
    "slug": "guardian-technology",
    "url": "https://www.theguardian.com/money/2026/nov/15/captcha-scam-computer-malicious-software"
  },
  "original_language": "en",
  "account": "Criminals are increasingly using a scam called \"ClickFix\" to infect computers with malicious software. Unlike traditional Captcha tests, which require users to verify they are human, ClickFix asks users to press specific keys on their keyboards. This technique, according to Chris Fistonich, a researcher at cybersecurity firm Malwarebytes, is one of the most sophisticated malware campaigns currently in use. \"People are not prepared for this,\" Fistonich explains. \"They are used to solving Captchas every day. They’re used to being able to trust their security software. So it really has opened a new security loophole that's being exploited extensively.\"\n\nThe ClickFix scam presents users with a message like \"Verify you are human by completing the action below\" and asks them to tick a box. By checking this box, users grant permission for malicious code to be copied onto their computer's clipboard. To complete the task, they must press and hold the Windows Key, then press R, type Ctrl + V, and finally enter. This combination of actions pastes the malicious code into the user's system, resulting in an infection.\n\nThe scam can take various forms, often warning users about a webpage error and instructing them to fix the issue with similar key combinations. As with many scams, the ClickFix fraud relies on users acting quickly and without careful consideration. It is crucial to pause and think before performing any online actions to avoid falling victim to this and similar scams. Users should also ensure their security software is up-to-date and check for potential vulnerabilities. If compromised, users should contact their bank immediately and change their passwords, starting with the most important ones.",
  "summary": "Unlike familiar Captcha tests, this con asks you to press a series of keys. And that’s a way in for fraudsters to install malicious software You are looking for some gifts for Christmas and want to support small businesses when you shop. When you visit the site of one you’ve heard good things about you are asked to verify that you are human. Instead of clicking on a series of images, or typing…",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}