iClicker site hack targeted students with malware via fake CAPTCHA
A ClickFix attack that tricked students and teachers into installing malware on their computers by using a phony CAPTCHA prompt attacked the website of iClicker, a well-known student engagement platform.
A division of Macmillan, iClicker is a digital classroom tool that lets teachers monitor student participation, take attendance, and provide real-time questions or surveys. Seven million students and 5,000 teachers utilize it extensively in colleges and universities around the United States, including Californian universities, the University of Florida, and the University of Michigan.
The iClicker website was compromised between April 12 and April 16, 2025, to show a phony CAPTCHA that asked users to click "I'm not a robot" to confirm their identity, according to a security advisory...