Skip to content

Glossary: Threat Vectors: Files, Networks and Endpoints

ClickFix

Also written: fake CAPTCHA

A fake 'verify you are human' page that quietly copies a command to the clipboard and tells the person to press Windows+R, Ctrl+V and Enter, so they run the attacker's command themselves. No real CAPTCHA ever asks you to press keys.

Where the book teaches it

Related terms

CAPTCHA (Completely Automated Public Turing test to tell Computers and Humans Apart)Run boxJavaScript