ClickFix Awareness

Posted on by

Summary

ClickFix is an attack vector designed to trick users into running malicious code on their devices under the guise of completing a CAPTCHA prompt (A/K/A “Verify Your Human” prompt).

Recommendations

A legitimate CAPTCHA will never ask a user to perform any of the following actions:

  • Open “Terminal”, “Command Prompt”, “PowerShell”, or the “Run” Dialog Box
  • Paste commands or a string into any of the above programs
  • Press “Windows Key + R” or “Windows Key + X”

If you see a CAPTCHA asking you to perform any of these tasks, it is very likely malicious.

Do NOT follow the steps, close the website immediately, and report any relevant information to the UConn Information Security Office by emailing security@uconn.edu.