5,400+ legit sites compromised in ClickFix CAPTCHA malware campaign

A large-scale campaign has compromised over 5,400 legitimate websites to serve fake CAPTCHA pages that trick Windows users into pasting malicious commands into the Run dialog, a technique known as ClickFix. The attack leverages trusted domains to bypass security filters, and the full scope of affected sites and malware payloads remains unclear. This represents a significant expansion of ClickFix distribution, targeting users through high-trust web properties.