Discussion
RE: https://infosec.exchange/@james_inthe_box/117212679611330078
uBlock Origin (the ad blocker) does a really good job at blocking ClickFix attacks (where user is encouraged to paste commands into Run box). They added support in July and have been refining rules.
While browser makers are edging out #ublockorigin , ublockorigin keeps getting better:
Obvious point - browser makers (hi Google and Microsoft) should have this stuff built in. They literally sit at the first layer and have done nothing about it.
Both companies have huge cybersecurity businesses with threat intel and incident response, and have financial incentives to not take action.
ClickFix makes a majority of real world cyber incidents I see nowadays. From ESET's 2025 and 2026 reports, too:
Install bonfire.cafe
Get the full app experience
