Learning track 01 · about 5 minutes
ClickFix
Challenge
Practise recognising the moment a familiar webpage tries to move you into Run, Terminal or another system tool.
Start this trackView all learning tracks →ClickFix Challenge
Make the call
Verify you are human
1. Open the Windows Run dialog
2. Paste the provided verification text
3. Press Enter to continue
Training preview: no command provided or copied.Scenario 1 of 5 · Spot the boundary
Verification leaves the browser
A delivery page asks you to open Windows Run and paste verification text. What matters most?
Select an answer to continue.
The decisive signal is the move from a webpage into an operating-system tool. Real web verification stays inside the browser.
Remember: browser checks should remain in the browser.
Sign in
No account? Create one!
NextScenario 2 of 5 · Read the address
A copied brand, wrong host
A polished Microsoft sign-in form appears after the check. Which clue deserves the most weight?
Select an answer to continue.
Logos and layouts can be copied. The registered hostname tells you where the form is actually hosted.
Remember: trust the verified hostname, not the page artwork.
Invoice #1048
Professional services
Total $2,450
Scenario 3 of 5 · Resist the detour
The PDF becomes software
An expected invoice now requires an unfamiliar desktop reader. What is the safest next step?
Select an answer to continue.
The task changed from viewing a document to installing software. Stop and verify through a channel you already trust.
Remember: unexpected task switching is a strong warning.
Scenario 4 of 5 · Verify support
“Paste this fix into Terminal”
A work-chat account claiming to be IT sends a repair command. Which response is safest?
Select an answer to continue.
A compromised account can answer its own verification question. Confirm through your known help-desk process instead.
Remember: verify unusual execution requests out-of-band.
Windows PowerShell
PS C:UsersLearner>
[Previously pasted text — omitted]
▌The text has already run. Decide how to contain and report the incident.
Scenario 5 of 5 · Respond quickly
You followed the steps
You pasted the text and pressed Enter before recognising the attack. What should happen first?
Select an answer to continue.
Treat the device as potentially compromised. Fast isolation and reporting give responders the best chance to contain harm.
Remember: report immediately and describe exactly what happened.
Challenge complete
You read the signals.
This-device leaderboard
Your best attempts
Names and scores stay in this browser. A secure cohort leaderboard can be added with the future training platform.
Keep learning