In an interview with KATV’s Little Rock ARC, Chris Wright, co-founder and partner at Sullivan Wright Technologies, warned viewers about the rise in "ClickFix" scams, a social engineering attack that disguises itself as a routine verification prompt.

Unlike legitimate CAPTCHA tests, ClickFix tricks users into executing malicious code on their own devices, allowing cybercriminals to bypass traditional security protections to steal sensitive information or install software that enables ongoing remote access. A few of Chris’s key takeaways include:

• Be cautious of unusual verification requests. Legitimate "prove you're human" prompts should never ask users to open system tools such as Windows Run, Command Prompt, PowerShell, or Mac Terminal and paste in commands.
• Never run code you don't understand. Copying and executing unfamiliar commands can give attackers direct access to a device while bypassing many built-in security measures.
• Small businesses and individuals are frequent targets. Cybercriminals increasingly focus on everyday users because even relatively small financial gains or stolen credentials can make attacks worthwhile.
• Recognize the signs of social engineering. ClickFix succeeds by leveraging familiar online experiences and convincing users that a malicious request is simply a new form of verification.
• Protect passwords and sensitive information. Once attackers gain access to a device, they may attempt to steal login credentials, financial information, or install remote access tools that allow them to return later.
• Stay informed about emerging scams. Cyber threats continue to evolve, making cybersecurity awareness an essential part of protecting personal and business information.

Chris’s overall message? Cyberattacks increasingly rely on deception rather than technical complexity. By slowing down, questioning unexpected requests, and refusing to run unfamiliar commands, users can significantly reduce their risk of falling victim to scams like ClickFix.

See the full interview on katv.com.