11/04/2026
A fake "verify you're human" check can trick you into installing password-stealing malware yourself.
Full story: https://www.tech360solutions.com/articles/clickfix-copy-paste-scam
In October a business owner in the Kansas City area brought us a laptop with a dead Start menu. Microsoft 365 wouldn't let him sign in. His PowerShell history held two commands, run from his own account, and each one downloaded a script from a website and ran it on the spot. The paid antivirus on the laptop didn't stop either one.
That's the pattern of a scam called ClickFix. A web page shows what looks like a CAPTCHA check or an error fix, then walks you through pressing a couple of keys and pasting in a line of text. That text is a command that downloads malware and runs it on your computer. In one campaign Microsoft's security team found this year, the malware was Lumma Stealer, which takes the usernames and passwords saved in Chrome and Edge. We can't say exactly what ran on our client's laptop, so we had him change his passwords from a clean device.
No real website asks you to paste something to prove you're human. If one does, close the tab.
Want a second set of eyes on how your computers are set up? Book 15 minutes: https://tech360solutions.com/review