We have recently seen an increase in ClickFix attacks targeting employees across our region. This social engineering technique uses a fake website verification prompt (known as CAPTCHA) to trick you into running commands or installing malicious software on your computer.

A genuine CAPTCHA may ask you to:

• Select images from a grid.
• Solve a simple puzzle.
• Type random characters shown in an image.

A suspicious verification may ask you to:

•  Copy and paste text.
•  Open a system window on your computer.
•  Follow instructions outside the webpage.
•  Complete unusual verification steps.

These requests are not part of a normal security check and may be an attempt to take control of your computer or install malicious software.

If anything seems unusual:

• Stop immediately.
• Do not follow the instructions.
• Close the website.
• Report the incident to the Global Service Centre (GSC).

Please remain vigilant. Thank you for helping to protect Cemex data and systems.