Accessibility links

Facebook   X   LinkedIn   Email

ClickFix Attacks Help You Hack Your Own PC

By: Jim Stickley and Tina Davis
March 15, 2026

PC users beware—ClickFix attacks are here. Global cybersecurity company ESET’s did some research on the topic. Its research finds ClickFix incidents are now a close second to phishing—and that’s saying something. They also found these two-faced attacks multiplied a crushing 500%+ during that same year. And they are pretty crafty in their trickery too.

ClickFix attacks trick you into hacking your own PC.

These attacks begin with phishing emails, phishing websites and fake reCaptcha’s. Taking the bait results in an “error message” on your device. Even more alarming, the message also tells a victim “You’re the only one who can fix it.” Once you take the bait, you’re also told the following steps will “fix the security error.” Unfortunately, those directions won’t ever fix the security error. That’s because there never was an error to begin with. Instead, what it means is the victim just handed their self-hacked PC to the attacker. 

Spotting A ClickFix Strike

Keeping your phishing cyber-smarts set on high helps avoid ClickFix and other phishing attacks. Knowing a setup when you see one also goes a long way for safety. If there’s one particular thing to look for with ClickFix attacks no matter how it’s delivered or worded, there’s always a hacker message or direction to: 

Press the Windows Key + “R” and then paste “Ctrl+V” then “Enter.”  

Whatever you do, don’t do it! If you do, you’ll end up doing the hacker’s job for them.

It’s well known that over 90% of cyberattacks begin with phishing. It’s been an invaluable hacking tool for decades since phishing tactics keep reinventing themself as technology marches on. These attacks are getting more sophisticated by the day, and with help from AI there’s no telling what’s next. 

ClickFix is one of the latest episodes in the long line of phishing attacks aiming to catch us off guard. And since we don’t know what’s coming at us next, keep your phishing red flags waving and never take the bait.



LastPass Users Targeted by Fake Backup Phishing Scam

Scams & Phishing

LastPass Users Targeted by Fake Backup Phishing Scam

LastPass users are being targeted by phishing emails urging “urgent vault backups” before fake maintenance. These messages aim to steal master passwords by leading victims to counterfeit sites. Attackers are sending deceptive emails claiming LastPass will perform scheduled maintenance and that users must “backup your password vault within 24 hours.” It’s no surprise that it leads to phishing sites designed to capture your master password. READ FULL STORY
Sneaky Fake Error Pop-Ups Are Spreading Malware Everywhere

Scams & Phishing

Sneaky Fake Error Pop-Ups Are Spreading Malware Everywhere

It’s the kind of online trick that makes your heart skip a beat. A window pops up on your screen telling you there’s something wrong with your computer or that the website you’re trying to view is corrupted. But what looks like a legitimate warning might actually be a malware trap, and cybercrooks are using it to infect your devices without you realizing it. Security experts have discovered a new scam tool being used on compromised websites. READ FULL STORY
Fake Update Ads Steal Your Passwords

Scams & Phishing

Fake Update Ads Steal Your Passwords

We know the cyber-cheats are always out there using every trick in the book to steal our money, identities and whatever else they can get their hands on. So, the next time you’re alerted to a software update, especially one appearing in an online ad, it’s time to step back and take a closer look before tapping “Download.” A latest malvertising campaign lures users into downloading a fake software update. The now custom, improved malware is being used at this very moment and surely will continue doing damage well into the new year. READ FULL STORY
Not All Cookies Are Created Equal; Know When Not To Accept Them

Your Security

Not All Cookies Are Created Equal; Know When Not To Accept Them

It seems every webpage you land on these days has an “Accept Cookies” pop-up. After all, what’s the big deal about a few cookies, so we click “Accept” and move on. Well, turns out it’s a bigger deal to accept cookies than most users realize. Thinking twice before you accept them can help keep malicious and zombie cookies off your device, among other things. Who would ever think a few innocent cookies could be a bad thing, but unfortunately, many of them are. READ FULL STORY
Spyware Pop-Up Danger – 4 Words NOT To Click

Scams & Phishing

Spyware Pop-Up Danger – 4 Words NOT To Click

When it comes to our personal online safety, sometimes knowing what NOT to do is as important as doing the smart thing. Avoiding trouble like spyware is crazy important, including knowing how not to download it. There are security basics we can all benefit from, and one of the following tips involves four little words NOT to click on with those annoying but potentially dangerous pop-ups. A security employee from McAfee shares the four words to avoid those bad pop-ups or risk downloading spyware. READ FULL STORY




We use cookies to give you a more relevant browsing experience and improve our website. Using this site means that you agree with our use of cookies policy.