ClickFix attacks infecting PCs and Macs are going viral

arstechnica.com

11 pointsjoozio4 comments

I almost fell for one. Actually I did, but uBO blocked it.

I searched for "Homebrew install". Clicked the first link. It looked exactly the same as the legit brew.sh. I was tired and didn't even think twice. Google wouldn't have put the scam clone website ahead of the real one, right?

When I clicked to copy the install command (which read exactly correct), I got the uBO message saying it blocked a ClickFix attack. Users who do that without protection would have the wrong URL on their clipboard, and likely install malware thinking they were getting upstream Homebrew.

I haven't seen it spelled out, either here or in TFA: Is uBlock Origin, and thus Firefox, required? Or is uBlock Origin Lite, and therefore a Chromium-based browser, sufficient?

Which one blocked the homebrew attack you mentioned? Because while I have a suspicion, knowing, and having it stated explicitly, is still good information to have

https://github.com/uBlockOrigin/uAssets/discussions/34325#di...

I think that implies mv3 does support it. Seeing as it can inject scripts, I don't see why it wouldn't be able to.

In my case, it was uBO on Firefox. I don't use Chrom(e|ium) so I couldn't tell.

Reply on news.ycombinator.com