Thiruvananthapuram | Kerala police on Tuesday warned the public about a new cyber scam called 'ClickFix', which tricks users with fake CAPTCHA verification prompts to gain access to their computers and steal sensitive data.
In an advisory, the police said cybercriminals were using malicious websites to trick users into executing commands or downloading files after they completed what appeared to be a genuine CAPTCHA verification.
According to a police statement, victims are shown a fake dialogue box containing instructions that, if followed, allow attackers to compromise their systems.
The attackers can then steal online banking credentials, email accounts and passwords stored in web browsers, including those for social media platforms.
In some cases, they may lock users out of their accounts and demand a ransom to restore access, the statement said.
The police stressed that no legitimate website asks users to open or execute PowerShell or Command Prompt commands, download files or install software as part of CAPTCHA verification.
People who suspect malware has been installed on their devices were advised to immediately disconnect the system from the internet by turning off Wi-Fi or unplugging the LAN connection and avoid transferring suspicious files to other devices.
They were advised to take the affected device to the nearest cyber police station for assistance.
Victims of online fraud should immediately contact the National Cybercrime Helpline at 1930 or report the incident through the Cyber Crime Reporting Portal, the police added.
