ClickFix campaign leverages finger.exe to trick users into running malicious commands

Cyberpress • December 15, 2025

... Zero - Day Threat · Cyber Security News December 15, 2025. Related Stories. Cyber Security News · Critical Plesk Flaw Allows Users to Gain Root-Level ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Clickfix Attack Uses finger.exe to Deploy Malware via Deceptive CAPTCHA A new social engineering campaign named ClickFix has been identified, utilizing the Windows command-line tool finger.exe to install malware on users' systems. The attack initiates with a misleading CAPTCHA verification page that tricks users into executing a script, thereby starting the infection process. This technique has been in use since at least November 2025. 4 sources 40

Extracted Entities

ClickFix campaign leverages finger.exe to trick users into running malicious commands

The full story

Extracted Entities

Attack Types (1)

Campaigns (1)

Tools (1)