ClickFix
is a social engineering scam that tricks users into running malicious commands
on their own computers. Instead of breaking into a system directly, Users may
be instructed to open Run, PowerShell, Command Prompt, or Terminal,
paste a command, and press Enter. While these steps may seem harmless, the
command can download malware, steal sensitive information, or give attackers
access to the device.
Why
This Matters
ClickFix
attacks are effective because they target people, not technology. By convincing
users to perform the action themselves, attackers can bypass traditional
security measures and gain access to valuable data, accounts, and systems. A
single click can lead to credential theft, malware infections, or unauthorized
access.
What
to Watch For
Be
cautious if a website or pop-up asks you to:
- Verify
you're human by following unusual steps
- Open
Run, PowerShell, Command Prompt, or Terminal
- Copy
and paste commands into your computer
- Fix
a browser, document, or security issue by running a command
- Complete
unexpected troubleshooting instructions
How
to Stay Safe
Reporting
Suspicious Activity
If you
notice a website asks you to copy, paste, and run a command, stop and verify
before proceeding, and report it immediately to UTMB Information Security at cirt@utmb.edu.