ClickFix Attacks Expand Using Fake CAPTCHAs, Microsoft Scripts, and Trusted Web Services

Back Thehackernews

ClickFix Attacks Expand Using Fake CAPTCHAs, Microsoft Scripts, and Trusted Web Services

Thehackernews •[email protected] (The Hacker News) • January 27, 2026

Share: View original

Discover how leading MSSPs use AI to automate security management, boost margins, and scale services without extra headcount.

Join cybersecurity leaders Kumar Saurabh and Francis Odum to learn how to build, buy, and automate smarter for a modern, efficient SOC.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

ClickFix Attacks Utilize Fake CAPTCHAs and Microsoft Scripts ClickFix attacks have expanded, employing fake CAPTCHAs and Microsoft scripts to exploit vulnerabilities. Leading Managed Security Service Providers (MSSPs) are adapting by using AI to enhance security management and operational efficiency. The attacks target various organizations, leveraging trusted web services to increase their effectiveness. 2 sources 33

Extracted Entities

Tools (1)

Microsoft Scripts