Skip to content
ClickFix Scams Target Education Sector and General Public

ClickFix Scams Target Education Sector and General Public

First seen 21 Oct 2026, 09:45 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 21, 2026 at 11:45 UTC
  • •ClickFix scams have surged in the education sector, with thousands of phishing attempts blocked weekly.
  • •Users are tricked into executing malicious commands via fake prompts and verification pages.
  • •Malware delivered through ClickFix attacks includes infostealers and remote access trojans.

ClickFix scams are increasingly targeting users in the UK, particularly within the education sector, as reported by Jisc and Jammu Kashmir Police. These scams manipulate users into executing malicious commands through fake CAPTCHA prompts and browser error messages. Jisc has blocked between 300 and 37,000 phishing attacks weekly since the academic year began, with ClickFix attack volumes reportedly increasing 23-fold from December 2025 to May 2026. The scams often deliver malware payloads, including infostealers and remote access trojans, affecting a million unique devices. Authorities urge users to avoid suspicious prompts and report incidents to national cybercrime helplines. The ClickFix technique bypasses many security measures, making it a significant threat to networks.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2025-12-01
ClickFix attack volumes spike
Microsoft reported a 23-fold increase in ClickFix attacks from December 2025 to May 2026, with malware payloads following 96% of the time.
Computerweekly
2026-10-17
Jammu Kashmir Police issue ClickFix warning
Police caution against ClickFix cyberattacks, advising users to avoid suspicious prompts and report incidents.
Kashmirlife
2026-10-21
Jisc reports phishing attacks
Jisc revealed it has blocked between 300 and 37,000 phishing attacks weekly against UK educational institutions since the academic year began.
Computerweekly

More articles in this cluster (3)

Following this threat?

Track AsyncRAT and Jisc in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (15)

1 / 4

Common questions

What are ClickFix scams?
ClickFix scams are social engineering attacks that trick users into executing malicious commands through fake prompts.
Who is affected by ClickFix attacks?
Primarily the education sector in the UK, but general internet users are also at risk.
What should users do to protect themselves?
Users should avoid clicking on suspicious links and report any cyber fraud to the national helpline.