
New Zealand's NCSC warned that hackers are using 'ClickFix' to compromise websites and trick users into running malicious PowerShell or terminal commands.
The attacks display fake Cloudflare 'Verify You Are Human' prompts or CAPTCHAs to deceive visitors into infecting their own Windows or macOS systems.
Security agencies advise website owners to check for full-screen overlays and malicious JavaScript that targets specific browser user agents to evade security scanners.