WordPress ClickFix Malware Causes Google Warnings and Infected Computers

Since December of last year there has been a new fake Google reCAPTCHA campaign making its way through the WordPress world. Very similar to malware which we wrote about last Summer, the website malware injection attempts to trick unsuspecting victims into executing malicious Powershell commands within Windows OS environments with the end goal of infecting their computers.

The malware disguises itself as a fake Google ReCAPTCHA which lodges itself into the home page of the infected website:

Since most surfers of the web have probably lost count years ago of the number of times they’ve had to click on all the fire hydrants, motorcycles, or traffic lights to prove they’re not a bot most people probably wouldn’t think twice about clicking through this prompt.

Continue reading WordPress ClickFix Malware Causes Google Warnings and Infected Computers at Sucuri Blog.