ClickFix attacks are tricking Mac and Windows users into hacking themselves

ClickFix campaigns now use compromised Reddit accounts to distribute fake ads that mimic CAPTCHA checks. Victims paste terminal commands that install info-stealing malware, bypassing standard antivirus defenses. The attack vector targets both Mac and Windows users, exploiting trust in legitimate platforms. Specific malware families and remediation steps are not detailed in this report.

Cover image for ClickFix attacks are tricking Mac and Windows users into hacking themselves