ClickFix cyberattacks trick Mac and Windows users into self-infection

PROCESSING CONFIDENCE94%Model confidence in the classification from supplied reports

COVERAGE2 reports2 publisher domains

FIRST DETECTEDSep 15, 2026, 5:31 AM UTCFirst time DoomRadar attached a report to this event

LAST MATERIAL CHANGENo later material changeRoutine duplicate coverage does not count as a material update

WHAT HAPPENED

ClickFix attacks are reportedly deceiving users on macOS and Windows into executing steps that infect their own devices. The campaign targets users across both major desktop operating systems.

SO WHAT?

The technique can enable broad malware distribution through social engineering rather than a narrowly targeted software exploit.

SCORE CONTEXT

Why 48 is a meaningful score

4841–60

A score of 48 sits in DoomRadar's 41–60 band, which represents meaningful regional, economic or public impact. The score estimates potential severity and wider impact; it is not a probability or a forecast of losses.

See scoring methodology →

EVIDENCE

How much reporting is behind this event

2REPORTS

2PUBLISHER DOMAINS

94%PROCESSING CONFIDENCE

Processing confidence reflects the model's confidence in its event classification from the supplied reports. It does not mean every claim in every linked report is independently verified.

LATEST REPORTING