Opera browser has integrated a new security feature called Paste Protect, which is designed to protect users from cyberattacks via the clipboard. This tool blocks the copying of malicious code, which is usually spread through the popular ClickFix scam.
Opera browser has integrated a new security feature called Paste Protect, which is designed to protect users from cyberattacks via the clipboard. This tool blocks the copying of malicious code, which is usually spread through the popular ClickFix scam.
This is reported in a press release from the developers. According to the company, Paste Protect makes Opera the first major browser with a built-in anti-threat system based on ClickFix. According to the developers' statistics, in 2025 this type of fraud accounted for more than half of cyberattacks related to downloading malicious software.
The ClickFix scheme is based on social engineering and is usually disguised as simple verification requests, such as a Captcha. When the user clicks the «I’m not a robot» button, the site silently copies malicious code to the computer’s clipboard. After that, instructions appear on the screen to complete the verification: the user is asked to press the Win+R key combination (to open the «Run» window), paste the copied text via Ctrl+V, and press Enter.
If the user performs these actions, the system runs a malicious script (often disguised or hidden using commands like mshta) that downloads info-stealer viruses like Lumma Stealer from the network. They are capable of stealing saved passwords, autofill data, and cookies to automatically log in to accounts.
Paste Protect detects such malicious scripts, designed for Windows, macOS, and Linux, at the stage of a copy attempt. It automatically blocks this action, warns the user about the threat, and marks the address bar with a red icon. Users can view the first 120 characters of the blocked command and manually add the site to the whitelist in case of a false positive.
«With Paste Protect, Opera becomes the first major browser to have a built-in protection and warning system against cyberattacks based on ClickFix, which accounted for more than half of all malware-downloading cyberattacks in 2025,» the company’s representatives noted on their official blog.
By default, the protection feature is enabled for all users. You can check its status or disable it if necessary in the browser menu: «Settings» — «Privacy and security» — «Paste Protect». The update with the new security technology is gradually becoming available in different regions of the world.
Recall that in 2025 , the Russian hacking group Gamaredon conducted 35 separate targeted phishing campaigns against Ukraine, with the majority of attacks occurring in the second half of the year. The main targets of the attackers were Ukrainian state and military institutions.
