A CAPTCHA Never Needs a Command
Recognise pages that ask you to paste something into Run, PowerShell or Terminal to “verify” or “fix” a problem.
Illustrative scenario
How It Looks in Real Life
A website shows a “Verify you are human” box. It tells you to press Windows + R, paste with Ctrl + V and press Enter. The page has already copied text to your clipboard without you noticing.
Understand it
How the Attack Works
The page silently places a command on your clipboard, then walks you through pasting and running it. Because you run it yourself, the command can bypass some download warnings and install malware. Microsoft documented this technique, called ClickFix, in 2025.
Red flags
Warning Signs
- Instructions to open Run, PowerShell, Terminal or a command prompt.
- Keyboard shortcut steps (Win + R, Ctrl + V, Enter) as part of a “verification”.
- A fake browser, document or meeting error that offers a “fix” to copy.
Safer habits
What to Do Instead
- 1Close the tab. Real CAPTCHAs only ask you to click, type characters or select images inside the page.
- 2Never run commands you did not write or fully understand from a website.
- 3Report the page to IT, including the address, without revisiting it.
Response playbook
Already Interacted?
For work accounts and devices, report promptly through your organisation’s IT or security process first. Never share passwords, codes or tokens in a report.
If you: installed software or ran a command
- 1Disconnect the device from the network (Wi-Fi off or cable out) but leave it powered on.
- 2Report to IT or security and describe exactly what you ran or installed.
- 3Do not delete files, wipe the device or run cleanup tools yourself; evidence helps the investigation.
- 4From a different, trusted device, change passwords for accounts used on the affected machine.
Knowledge Check
What Would You Do?
A page at docs-viewer.example.com says “Font missing. Press Win + R, paste the fix and press Enter to view the document.” What do you do?
Fictional example for learning. Not a test score or certification.
Sources
Content reviewed by WazuGuardix on 5 October 2026. Summaries are in our own words.
Make Safe Habits Part of Your Culture
Plain-language awareness sessions for everyday staff, developers and business teams.