ClickFix attacks infecting PCs and Macs are going viral

Posted by joozio 14 hours ago

Counter10Comment3OpenOriginal

Comments

Comment by cassianoleal 11 hours ago

I almost fell for one. Actually I did, but uBO blocked it.

I searched for "Homebrew install". Clicked the first link. It looked exactly the same as the legit brew.sh. I was tired and didn't even think twice. Google wouldn't have put the scam clone website ahead of the real one, right?

When I clicked to copy the install command (which read exactly correct), I got the uBO message saying it blocked a ClickFix attack. Users who do that without protection would have the wrong URL on their clipboard, and likely install malware thinking they were getting upstream Homebrew.

Comment by xethos 10 hours ago

I haven't seen it spelled out, either here or in TFA: Is uBlock Origin, and thus Firefox, required? Or is uBlock Origin Lite, and therefore a Chromium-based browser, sufficient?

Which one blocked the homebrew attack you mentioned? Because while I have a suspicion, knowing, and having it stated explicitly, is still good information to have

Comment by krackers 7 hours ago

https://github.com/uBlockOrigin/uAssets/discussions/34325#di...

I think that implies mv3 does support it. Seeing as it can inject scripts, I don't see why it wouldn't be able to.