Kurzfassung
The NCSC Switzerland warns of a sharp rise in compromised legitimate websites (over 100,000 globally) that display fake CAPTCHA verification pop ups. Instead of a normal "I am not a robot" check, users are shown instructions to copy and...
Wie es funktioniert
The NCSC Switzerland warns of a sharp rise in compromised legitimate websites (over 100,000 globally) that display fake CAPTCHA verification pop ups. Instead of a normal "I am not a robot" check, users are shown instructions to copy and...
Warnzeichen
- : A CAPTCHA asks you to press Win+R, open PowerShell, or paste a command — real CAPTCHAs never require this. The verification box appears on a site that has nothing to do with security (news, blogs, shops). Instructions use urgency or technical jargon ("verify you are human", "update browser cache") to push you past doubt
Was tun
- 1: Never copy paste or run commands suggested by a web page, chat, or pop up. Keep your browser, OS, and antivirus updated and enable real time web protection. If you already ran the command: disconnect from the network, change all passwords from a clean device, and run a full malware scan or seek profess
Quelle
ncsc-switzerland
Quelle geprueft vom Mythos Forensic Team
https://www.ncsc.admin.ch/ncsc/en/home/aktuell/im-fokus/2026/clickfix.htmlFAQ
Ist Fake CAPTCHA prompts trick users into running malware on their PCs ein reales Betrugsmuster?
Ja. Behandeln Sie Nachricht, Anruf oder Zahlungsaufforderung als verdaechtig, bis ein offizieller Kanal sie bestaetigt.
Was sind die ersten Warnzeichen?
: A CAPTCHA asks you to press Win+R, open PowerShell, or paste a command — real CAPTCHAs never require this. The verification box appears on a site that has nothing to do with security (news, blogs, shops). Instructions use urgency or technical jargon ("verify you are human", "update browser cache") to push you past doubt
Was sollte ich zuerst tun?
: Never copy paste or run commands suggested by a web page, chat, or pop up. Keep your browser, OS, and antivirus updated and enable real time web protection. If you already ran the command: disconnect from the network, change all passwords from a clean device, and run a full malware scan or seek profess
Kann LegalAudit meinen Fall pruefen?
Ja. Starten Sie den kostenlosen Chat und fuegen Sie Nachricht, Link, Absender oder Zahlungsdaten ein.