If you use Google Meet, you may be at risk to a new malicious pop-up attack.
A newly identified scam, ClickFix, is a stark reminder that social engineering tactics are still alive and thriving. This threat doesn’t need AI to work; it just needs your trust and a few keyboard shortcuts.
What Is ClickFix?
ClickFix is a pop-up attack that mimics a technical issue, often pretending to be a problem with your microphone in Google Meet. The goal? To convince you to copy and paste a line of PowerShell code into your Windows Run dialog. Once executed, this code silently downloads malware onto your device.
The attack typically begins with a fake Google Meet invite, often including terms like “google” and “join” to appear convincing.
But there’s a catch: Instead of asking for a login, the page displays a fake error like “Microphone Permission Denied” and instructs you to fix the issue by copying a block of code and running it manually. The steps are usually:
- Click a button to copy a “fix.”
- Open the Run command (Win + R).
- Paste the code (Ctrl + V).
- Hit Enter.
How to Stay Safe
Fortunately, avoiding ClickFix and similar scams is easy — if you know what to look for:
- Never run commands from untrusted sources. If a website tells you to open the Run box and paste in text, it’s a scam. No legitimate tech support or app will ask you to do this.
- Check the invite details. Watch out for strange URLs, especially those that mimic well-known services but aren’t hosted on official domains.
- Use security tools. Up-to-date antivirus and browser protection can catch some of these threats — but not all. Awareness is your best defense.
- Report suspicious emails or links. If you’re unsure, forward the message to your IT team or security provider for review.
Final Thoughts
Remember: If you ever see an error message telling you to open Run and paste in code — back out immediately. Close the tab, delete the email, and move on.
Worried about threats to your organization’s network? Contact us today for a free consultation at 703-790-0400 or sales@optfinITy.com.
Leave a Reply