{"id":2233435,"date":"2026-11-02T17:47:46","date_gmt":"2026-11-02T14:47:46","guid":{"rendered":"https:\/\/analyse.optim.biz\/?p=2233435"},"modified":"2026-11-02T17:47:46","modified_gmt":"2026-11-02T14:47:46","slug":"beware-fake-cloudflare-verification-tricks-users-into-giving-hackers-access","status":"publish","type":"post","link":"https:\/\/analyse.optim.biz\/?p=2233435","title":{"rendered":"Beware: Fake Cloudflare verification tricks users into giving hackers access"},"content":{"rendered":"

[analyse_image type=”featured” src=”https:\/\/helios-i.mashable.com\/imagery\/articles\/04ocSjPaVCVX18D6dj0Bqwv\/hero-image.fill.size_1200x675.v1793638325.jpg”]<\/p>\n

\n
\n
\n
\n
\n
\n
Home<\/a>><\/span>Tech<\/a><\/div>\n<\/section>\n<\/div>\n<\/div>\n

Beware: Fake Cloudflare verification tricks users into giving hackers access<\/h1>\n
Don’t fall for it.<\/div>\n
\n
\n \u00a0By\u00a0<\/p>\n
Matt Binder<\/a><\/p>\n
\n
\n
\n
\"Matt<\/p>\n
\n
Matt Binder<\/div>\n
Senior Tech Reporter<\/div>\n<\/div>\n<\/div>\n<\/div>\n
\n Matt Binder joined Mashable’s tech vertical in 2018, where he covers social media, tech policy, cybersecurity, online scams, cryptocurrency, AI, creator news, weird tech, and other related tech beats.\n <\/div>\n

Read Full Bio<\/a><\/div>\n<\/div>\n<\/div>\n

\u00a0on\u00a0

Share on Facebook<\/span><\/a>Share on Twitter<\/span><\/a>Share on Flipboard<\/span><\/a><\/div>\n<\/div>\n<\/header>\n<\/div>\n
\n
\"Cloudflare<\/p>\n
Hackers are now tricking internet users with fake Cloudflare verification pages.<\/span>Credit: Cloudflare<\/span><\/div>\n<\/div>\n
\n
<\/div>\n<\/div>\n
\n

Many websites and online platforms use Cloudflare<\/a> in order to properly handle web traffic. Cloudflare has become so ubiquitous that the few times the company’s services have gone down<\/u><\/a>, a significant portion of the internet goes down with it.\u00a0<\/p>\n

Hackers are very aware of this and are now rolling out new cyber attacks that impersonate Cloudflare in order to trick unsuspecting internet users into giving these cyber criminals unauthorized access to their computers.<\/p>\n

One such attack, according to reports<\/u><\/a>, weaponizes Cloudflare’s verification pages, often found on websites to prove a user is human and not a bot, in a ClickFix campaign. The newly discovered attack was recently discovered<\/u><\/a> by cybersecurity<\/u><\/a> researchers at the SANS Technology Institute’s Internet Storm Center.\u00a0<\/p>\n

\n
\n
You May Also Like<\/strong><\/p>\n
<\/div>\n
<\/div>\n

ClickFix campaigns are cyber attacks that rely on social engineering tactics. There are no software or hardware security flaws involved. There isn’t even a harmful file that a user was tricked into downloading. An unsuspecting victim is simply tricked into copying and executing malicious commands on their own device, which can download malware or provide the hacker with access.<\/p>\n

\n
<\/p>\n
Recommended deals for you<\/div>\n

The Apple iPhone 18 Pro is free right now with T-Mobile<\/span><\/a><\/p>\n<\/section>\n

\n Products available for purchase through affiliate links. If you buy something through links on our site, Mashable may earn an affiliate commission.\n <\/div>\n<\/section>\n
\n
Mashable Light Speed<\/span><\/div>\n
\n
\n
Want more out-of-this world tech, space and science stories?<\/div>\n
Sign up for Mashable’s weekly Light Speed newsletter.<\/div>\n
\n By clicking Sign Me Up, you confirm you are 16+ and agree to our Terms of Use<\/a> and Privacy Policy<\/a>.\n <\/div>\n<\/div>\n
\n
Thanks for signing up!<\/div>\n<\/div>\n<\/div>\n<\/section>\n
SEE ALSO:<\/span>Hackers find a way to turn users’ own AI agents and Downloads folders against them<\/span><\/a><\/div>\n

In this specific newly discovered attack, users visit a website that has already been compromised by the hacker. After clicking the Cloudflare verification box to prove they are human, the user is told that the process is taking longer than usual. The user does not know that this Cloudflare verification box is a fake, set up by the hacker.<\/p>\n

The prompt informs the user that to speed up the process, they need to follow the directions on the screen and run a specific command. This is where the hacker then gains access.<\/p>\n

According to the report, a different set of instructions appears to users based on whether they access the website through a PC running Windows or a Mac<\/u><\/a>. The report lists requests that appear intended to track information such as the visitor’s location and IP address.<\/p>\n

\n
\n
\n
Related Stories<\/div>\n
\n<\/div>\n