A security trick called ClickFix is spreading because it convinces users to infect themselves

The trick is social rather than technically exotic: a webpage presents a fake error and instructs the victim to paste a command into a terminal or run box.

For D, the practical rule is simple: any website that tells you to open Terminal and paste a command to fix access, verification, or a browser problem should be treated as hostile until proven otherwise.

Ars Technica reports that ClickFix attacks are increasingly targeting both PCs and Macs.