uBlock Origin Chrome extension now blocks known ClickFix sites
The uBlock Origin Chrome extension has been updated to block known ClickFix sites, which are malicious websites that use social engineering to trick users into clicking and running harmful code. This move helps mitigate ClickFix attacks, a growing threat where fake error messages prompt users to copy-paste or execute malicious scripts.
Background
- **uBlock Origin** is a free browser extension, widely considered the gold standard for blocking ads, trackers, and malicious websites.
- **ClickFix** is a social-engineering attack where a fake error page tricks users into pasting and running a malicious PowerShell command, often leading to malware infection. These attacks have surged in 2024.
- By blocking known ClickFix domains, uBlock Origin now prevents users from even loading the fake error pages — stopping the attack before it starts.
- This matters because ClickFix bypasses traditional antivirus; browser-level blocking is a crucial extra layer of defense.
- **Caveat:** Google Chrome is phasing out the old uBlock Origin in favor of a less powerful version (uBlock Origin Lite) due to the Manifest V3 changes. This update applies only to users still on the classic extension.