Opera adds Paste Protect to block ClickFix attacks

Opera has introduced a new security feature called Paste Protect, designed to block a prevalent type of social engineering attack that tricks users into executing malicious commands. The feature, now enabled by default in the latest desktop version of the browser, aims to intercept dangerous code before it can be copied from a website and pasted into a command-line interface.

The threat, known as ClickFix, typically begins with a deceptive webpage displaying a fake error message, a broken CAPTCHA, or a claim that a video will not play. The site then instructs visitors to copy a provided command and run it in their system's terminal, PowerShell, or Windows Run dialog to supposedly fix the issue. These commands, which often appear harmless, can install information-stealing malware, compromise saved passwords and browser data, or grant attackers remote access to the computer. According to cybersecurity firm Huntress, ClickFix campaigns were behind more than half of all malware-loading attacks in 2025.

Paste Protect combines two layers of defense. The first is an existing Hijack protection feature, introduced in 2021, which prevents external applications from secretly replacing...