ClickFix Block

*** About ***

Developed by Eye Security, ClickFix Block stops malicious Fake CAPTCHA and ClickFix attacks before they can do damage!

Clipboard-based social engineering attacks, called ClickFix or Fake CAPTCHA, are more and more often used in malware and credential theft campaigns. Fake CAPTCHAs are designed to trick the end-user into running malicious commands via Win+R and Ctrl+V, while prefilling the clipboard with a malicious command. ClickFix Block intercepts copy-to-clipboard operations triggered by JavaScript and checks the content for suspicious keywords, helping prevent malicious content from being silently copied to your clipboard. The extension also displays a warning if such malicious content is found. This extension does not influence normal copy and paste!

*** Features ***

✓ Injects monitoring code into every webpage to detect and block suspicious clipboard copy attempts.

✓ Uses keyword matching (e.g. powershell, mshta, not a robot) to identify potentially malicious clipboard activity related to ClickFix, Fake CAPTCHA and/or ConsentFix