Thiruvananthapuram: Kerala Police has issued a public advisory warning internet users about a new cyber fraud known as 'ClickFix', which uses fake CAPTCHA verification prompts to trick victims into giving attackers access to their computers and sensitive personal information.

In an advisory issued on Tuesday, police said cybercriminals are luring users to malicious websites that display what appears to be a legitimate CAPTCHA verification. After completing the fake verification, users are prompted to execute commands or download files that compromise their devices.

According to the advisory, victims are presented with a fake dialogue box containing instructions which, if followed, allow hackers to gain control of their systems.

Once access is obtained, attackers can steal online banking credentials, email accounts, passwords saved in web browsers and login details for social media platforms.

In some cases, cybercriminals may lock users out of their accounts and demand ransom payments to restore access.

Police stressed that genuine websites never ask users to execute system commands or install software during CAPTCHA verification.

"No legitimate website asks users to open or execute PowerShell or Command Prompt commands, download files or install software as part of CAPTCHA verification."

People who believe their devices have been compromised have been advised to disconnect them from the internet immediately by switching off Wi-Fi or unplugging the LAN connection. They should also avoid transferring suspicious files to other devices and take the affected system to the nearest cyber police station for assistance.

Victims of cyber fraud have also been urged to report incidents without delay.

"Victims of online fraud should immediately contact the National Cybercrime Helpline at 1930 or report the incident through the Cyber Crime Reporting Portal."