ClickFix scams are increasing also at the University — protecting yourself requires extra care
Recently, the ClickFix technique has become increasingly common among scams. It can make it possible to run malware on a victim’s computer with the victim’s own approval. In other words, the attacker aims to get malware downloaded onto the victim’s device and uses the victim to execute it. The victim is tricked into acting as the approver because, as users, we are accustomed to accepting small checks while browsing online: for example, many of us confirm “I am human” checks without much thought. In a ClickFix attack, the attacker gets the user to click small buttons that appear harmless. By doing so, however, the victim activates malicious content placed on the page. As a result, different types of malware may be installed on the victim’s computer, which the attacker may use, for example, to obtain information.
At the University of Helsinki, we have also seen an increasing number of ClickFix attacks and users who have unknowingly fallen victim to this scam. Protecting yourself from ClickFix attacks requires particular vigilance, because attackers may use popular websites, social media services and other sites that users actively visit as lures. A ClickFix attack may also be delivered to the victim by email.
Remember at least the following about ClickFix scams:
- Be especially careful with suspicious links, unusual buttons or advertisements that lead to unexpected websites or open several windows at once.
- Do not copy and paste text from a website into your computer’s command prompt.
- Be wary of website prompts asking you to open Run or PowerShell windows on your own device.
Read more about ClickFix attacks in the National Cyber Security Center Finland’s article (only in Finnish).
If you suspect that you have encountered a scam, contact IT Helpdesk immediately:
- Chat (weekdays 9–15, chatbot 24/7): helsinki.fi/helpdesk
- Tel: 029 41 55555 (weekdays 9–15, local network/mobile call charge)
- Email: helpdesk@helsinki.fi
Remember also to sign up for the Digital Security at the University webinar!
The IT Centre is organising the Digital Security at the University webinar on 1 October 2026, focusing on current digital security topics at the University. In the webinar, we will discuss current topics with experts and answer participants' questions about digital security. We will also answer questions submitted by students through the Ask about information security survey during this year.
It is also worth taking part because a University-themed prize will be raffled among all participants!