Israeli Cyber Authority Warns of ClickFix Malware Threat on Compromised Websites

The Israeli National Cyber Directorate has issued a warning about a new cyberattack method called ClickFix. In this scheme, hacked websites display fake messages to users, such as alerts about errors, requests for human verification, or prompts to update software. Users are sometimes asked to copy a code snippet, open a command window on their computer, and run the code manually. However, executing this code can install malware on the device. This malware is capable of stealing passwords, files, login credentials, and other personal information.

The Cyber Directorate strongly advises users not to copy or run any code shown on websites, even if the message appears legitimate. Anyone encountering such a request should immediately close the website, ensure their computer and security software are up to date, and avoid interacting further with the suspicious message. If the code has already been executed, the recommendation is to disconnect the computer from the internet and seek professional assistance for a thorough security check.