ClickFix attacks are tricking Mac and Windows users into hacking themselves
ClickFix campaigns trick users into pasting terminal commands via fake CAPTCHAs; latest wave abused HBO Max's hacked Reddit account to push infostealer ads.
ClickFix attacks use fake CAPTCHA or anti-bot prompts on hacked or counterfeit websites to convince victims to copy a command into Windows Command Prompt or macOS Terminal, instantly installing infostealers that steal passwords, logged-in sessions, and crypto wallets. The latest campaign compromised HBO Max's official Reddit account to post hundreds of fake ads linking to a spoofed HBO Max page carrying the lure, per researchers at Hudson Rock. It is unclear how many users were compromised. Because execution happens in the terminal, many attacks evade antivirus tools; enterprises can block terminals domain-wide and Mac users can deploy BlockBlock.
- Fake CAPTCHA lures get users to paste commands into Windows Command Prompt or macOS Terminal
- Pasted payloads install infostealers harvesting passwords, sessions, and crypto wallets, evading many antivirus tools
- HBO Max's official Reddit account was compromised to post hundreds of malicious fake ads
- Hudson Rock researchers documented the campaign; victim counts unknown
- Defenses include blocking terminals via domain policy and BlockBlock for macOS
From the original article
2 min read at techcrunch.com
If you clicked on a fake HBO Max ad on Reddit in the past week, you might have fallen victim to a rising 'ClickFix' security threat.
By Zack Whittaker · techcrunch.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.