10/27/2026
Tech Tip Tuesday:
A Website Shouldn't Ask You to Run a Windows Command
Cybercriminals are increasingly using a technique known as ClickFix.
Instead of asking you to download an obviously suspicious file, a website may display a fake security check, CAPTCHA, or "verification" message. It then instructs you to copy and paste a command into Windows Run, PowerShell, or another system tool.
That command can install malware.
A recent supply-chain attack involving the Brevo platform demonstrated how these malicious instructions could even appear through compromised services associated with legitimate websites.
🛡️ Remember:
❌ Don't copy and paste commands from websites into Windows.
❌ Don't run PowerShell or Command Prompt because a website tells you to.
❌ Be suspicious of unusual "Verify you're human" instructions.
✅ If something doesn't look right, close the page and contact ITI.
CAPTCHAs test whether you're human.
They don't need you to run commands on your computer.
Call ITI and we can gladly help with any questions and to keep you safe
