Futures
Access hundreds of perpetual contracts
TradFi
Gold
One platform for global traditional assets
Options
Hot
Trade European-style vanilla options
Unified Account
Maximize your capital efficiency
Demo Trading
Introduction to Futures Trading
Learn the basics of futures trading
Futures Events
Join events to earn rewards
Demo Trading
Use virtual funds to practice risk-free trading
Launch
CandyDrop
Collect candies to earn airdrops
Launchpool
Quick staking, earn potential new tokens
HODLer Airdrop
Hold GT and get massive airdrops for free
Pre-IPOs
Unlock full access to global stock IPOs
Alpha Points
Trade on-chain assets and earn airdrops
Futures Points
Earn futures points and claim airdrop rewards
Promotions
AI
Gate AI
Your all-in-one conversational AI partner
Gate AI Bot
Use Gate AI directly in your social App
GateClaw
Gate Blue Lobster, ready to go
Gate for AI Agent
AI infrastructure, Gate MCP, Skills, and CLI
Gate Skills Hub
10K+ Skills
From office tasks to trading, the all-in-one skill hub makes AI even more useful.
GateRouter
Smartly choose from 30+ AI models, with 0% extra fees
I just saw a report about the ClickFix attacks that are increasing more and more. It’s really concerning that hackers are continuously developing more sophisticated techniques.
According to a report from Moonlock Lab, a trusted cybersecurity company, attackers are starting to impersonate risk investment firms, sending job invitations via LinkedIn. Victims are directed to fake Zoom or Google Meet meeting links.
What I find most worrying is the method of deception: the webpage has a fake Cloudflare CAPTCHA button that looks authentic. When clicked, it copies malicious commands to the clipboard and tricks users into pasting and executing those commands in the terminal. This allows hackers to bypass traditional security protections because the victim is the one running the commands.
Hackers also have another method: they hijack the Chrome extension called QuickLens. After taking over, the new version released after two weeks contains hidden malicious scripts. This extension has about 7,000 users.
The things it can scan are severe. It scans digital wallet data and recovery phrases, extracts Gmail email information, YouTube channel data, and login or payment information on various websites. The extension has now been removed from the store.
This is a strong warning for everyone in the crypto space: be cautious of unexpected job invitations from LinkedIn, avoid running commands from untrusted sources, and keep an eye on installed browser extensions. This is no joke.