Tim Ackermann (@timack.bsky.social)

The malicious email might look like it came from a hotel where you have a pending reservation. It might even include your booking info. But eventually it leads to a fake CAPTCHA and instructions to input a string of text into a terminal window. It’s yet another credential-stealing attack.

loading . . .

ClickFix may be the biggest security threat your family has never heard of Relatively new technique can bypass many endpoint protections. https://arstechnica.com/security/2025/11/clickfix-may-be-the-biggest-security-threat-your-family-has-never-heard-of/