Gizmodo Hit by ClickFix Malware Attack Targeting Windows and macOS Users A security incident on Gizmodo briefly exposed visitors to the ClickFix malware over the weekend, with Windows users facing a more severe threat than macOS users. The attack, first reported by readers on Saturday, displayed fake CAPTCHA prompts on article pages, tricking users into executing malicious code via their terminals. Researchers at Proofpoint attributed the campaign to an affiliate of ErrTraffic, a ClickFix-as-a-service operation that allows attackers to deploy custom malware. The Windows variant attempted to install NetSupport RAT, a remote access trojan that abuses the legitimate NetSupport Manager tool to infiltrate systems. According to Darktrace, NetSupport RAT can exfiltrate files, deploy additional malware, and even deliver ransomware. The macOS version, while configured with a payload, appeared non-functional, requiring a password to open a ZIP archive effectively neutralizing the threat. Gizmodo confirmed the breach, stating that a compromised account was exploited to inject the malicious script. The site was taken offline briefly, the script removed, and the account secured. User reports spanned only a few hours, suggesting the attack was short-lived. By Monday, The Register verified that the malicious prompts were no longer active.