ClickFix: A new social engineering threat

Student News | Monday, April 27, 2026

The “ClickFix” social engineering technique is an emerging cyber threat that tricks users into running harmful commands on their own devices. (Note: There was a more than 500% surge in ClickFix cases in the past year.)

Attackers disguise instructions as routine fixes – like fake error messages or verification steps (e.g., “I’m not a robot”) – to gain access, steal credentials, or install malware. Because users perform the action themselves, these attacks can bypass traditional security protections. 

Watch for these red flags:  

• Unexpected pop-ups asking you to “fix” an issue or verify your system
•  Instructions to copy and paste commands into Run, Terminal, or PowerShell
•  Messages that create urgency or pressure you to act quickly 
• Requests coming from unfamiliar or untrusted websites
•  “Verification” steps that seem unusual or more complex than normal 
   

If you encounter any of these, do not proceed. Instead, close the message and report it to the IT Support Center at 614-287-5050, by email at helpdesk@cscc.edu, or by submitting a request at cscc.edu/ithelp. Staying cautious and recognizing these warning signs is key to preventing these attacks. 

Listen to a 10-minute audio post from Microsoft that analyzes ClickFix.

 

 

Go to 2026 Archive Go to Campus Insider