Experts warn ClickFix malware attacks are back, and more dangerous than ever before – here’s how to stay safe

• ClickFix now uses OS detection, timers, and video guides to boost malware delivery success
• Attackers host popups on compromised sites and promote them via Google malvertising
• Victims are tricked into running malware via fake problem/solution instructions in system dialogs

The dreaded malware deployment technique known as ClickFix is evolving, and now comes with a timer, video instructions, and automatic detection of the victim’s operating system, experts have warned.

ClickFix is a malware delivery scam that uses the problem/solution method – it first identifies a “problem” and then offers a “solution”. That problem can be a myriad of things, from “your computer is infected with malware” to “solve this CAPTCHA if you want to view the content”. The solution is almost always the same: copying and pasting a command in the Windows Run program (or its Linux/macOS equivalent) that deploys a malware dropper and through it – an infostealer or something even more sinister.