ClickFix campaign impersonates Cloudflare targeting Windows macOS

A new ClickFix campaign uses fake Cloudflare verification pages to target both Windows and macOS users. The attack attempts to distribute malware through social engineering by displaying spoofed verification prompts and command instructions. Researchers identified multiple indicators and domains associated with the campaign on October 28, 2026.