A routine security step has become a doorway for cybercriminals. Here’s how the fake-CAPTCHA scam works, why it catches ...

Hackers are using this insidious scam to get unwitting victims to install malware themselves.

ClickFix, a social engineering tactic that has been targeting both Windows and Mac users since early 2024, continues to evolve. Just last month, I reported on how attackers were using fake CAPTCHA ...

Russian state-backed hackers have stepped up their game with new malware families that hide behind fake CAPTCHA tests. The group, known as Star Blizzard or ColdRiver, now uses ClickFix attacks to ...

Microsoft's security team has published an in-depth report into ClickFix, the social engineering attack which tricks users into executing malicious commands in the guise of proving their humanity.… ...

As was shown in a recent report about a vicious cyber attack that targeted kidney failure patients, cyber criminals show no mercy. Now a new report from Microsoft has revealed a growing deployment of ...

A new report out today from big data company Splunk Inc. warns of a new trend in cybercrime: a surge in sophisticated social engineering campaigns that use fake CAPTCHA systems to deliver malware ...

The scam preys on muscle memory. People are used to clicking through CAPTCHAs quickly, and hackers are turning that routine ...

TL;DR Introduction At the start of this year, I wrote a blog on how 2025 was the ‘year of the infostealer’, and it doesn’t ...

A new social engineering campaign is abusing fake CAPTCHA verification pages to trick Windows users into launching StealC information-stealing malware. The attack relies on compromised websites that ...

Ghost CMS flaw CVE-2026-26980 enabled attacks on 700+ sites, injecting ClickFix malware through fake CAPTCHA pages.