Test your vulnerability against ClickFix
How can you protect yourself against ClickFix?
- Do the free online click-fix test on this site: first, test with the basic test if you are vulnerable
- Not harmful: the tests on this site are ‘dummy’ infections, not harmful in any way
- Learn by experience: If you understand how the technique works you can recognise the mind trick used
- When in doubt? Make a photo of the screen and share it with a professional of feed it in AI to learn about the risks before it is to late…
Click-fix online tests, start the test to see if a real hacker would infect your system
⚠️ **Important**
Our testing tools contain no malicious code and are solely intended for awareness purposes. After each test, you will receive instructions to remove test artifacts (temporary files, clipboard content). Correctly following these cleanup instructions is your own responsibility. Only conduct tests on systems for which you have obtained the necessary authorization.
**Disclaimer**
BSM Business Security Management BV is not liable for any consequences resulting from incorrect or incomplete execution of cleanup instructions, unauthorized use of testing tools, or any other actions taken in connection with the use of this website.
What are the different variants of ClickFix?
ClickFix is not a specific attack, but a social engineering technique that cybercriminals deploy in various ways. The objective remains the same: to deceive you into performing harmful actions on your computer.
Common variants:
Fake error messages
You receive a notification that a document, video, or webpage is not displaying correctly. The “solution” provided installs malware.
Fraudulent updates
Messages that appear to be official browser or system updates, but following the instructions installs malicious software.
Fake CAPTCHAs
Counterfeit versions of security checks that prompt you to copy and execute commands.
The danger lies in the method: ClickFix attacks bypass traditional security systems because you yourself perform the action. Your antivirus software does not prevent this.
How does ClickFix work?
ClickFix works by combining trust and urgency with seemingly simple instructions. This causes users to unknowingly compromise their own systems.
The typical approach:
- Fake notification – You see a credible error message or warning
- Apparent solution – A simple “fix” is offered
- Dangerous action – You follow instructions that install malware or grant access
Why this works: the instructions appear logical and you execute them yourself, preventing security software from blocking them.
What happens when a ClickFix attack hits you?
ClickFix is a very effective attack method, which is why hackers use it so widely. Once inside, hackers gain full control of your computer and could:
- Launch ransomware attacks
You could receive a notification that all your documents and photos are encrypted. Only if you pay will they promise to decrypt them. - Steal your identity documents
Many people have unprotected passports, driving licences, and ID cards on their computer or, often forgotten, in their mailbox. Hackers could copy these documents and steal your identity to take out loans, purchase goods, commit crimes, or perform other fraudulent acts in your name. - Send spam from your device
Hackers earn money from spam campaigns. They could use your device to send millions of emails. As a result, your internet connection could be blocked by your provider, and your email or domain addresses could be blacklisted. - Activate your microphone or camera
With full system access, hackers could enable audio or video recording without your knowledge. - Access your passwords
If you store passwords insecurely (in text, Word, or Excel files) or in your browser without a proper password vault, hackers could access and use them. Even if you don’t store passwords this way, they could install a keylogger to capture them—it just takes a bit longer.
Conclusion:
The possibilities are endless. There are countless ways hackers could harm you financially or emotionally. This is why protecting yourself against ClickFix attacks is critical.