FIGURES
- Microsoft: ClickFix campaigns target thousands of enterprise and personal devices worldwide every day; victims paste a command into the Windows Run box. Source: Microsoft Threat Intelligence, 21 Aug 2025, https://www.microsoft.com/en-us/security/blog/2025/08/21/think-before-you-clickfix-analyzing-the-clickfix-social-engineering-technique/
- Microsoft: On Mac, fake pages tell people to complete a download in Terminal, installing MacSync and Atomic Stealer from more than 250 fake sites. Source: Microsoft Threat Intelligence, 5 Aug 2026, https://www.microsoft.com/en-us/security/blog/2026/08/05/macos-clickfix-campaign-learned-hide/
- CISA and FBI: The Interlock ransomware group uses fake-CAPTCHA ClickFix pages to get in. Source: Cybersecurity and Infrastructure Security Agency and FBI advisory, 22 Jul 2025, https://www.cisa.gov/news-events/cybersecurity-advisories/aa25-203a

DEMAND SIGNALS (vidIQ, 25 October 2026)
- A CBS Philadelphia report on a CAPTCHA scam broke out at 121 times the channel's average, with 412,000 views (vidIQ).
- "Fake captcha malware" draws about 3,400 searches a month with low competition (26): space for an expert explainer (vidIQ).