Opera has announced the launch of a new security feature called Paste Protect, which aims to protect users from an increasingly common type of cyber attack known as ClickFix Clipboard Attacks. These attacks have been used by many malicious software in recent years. The company says that this new feature makes Opera the first major browser to offer built-in, default protection against these types of attacks, which accounted for more than half of malware download attacks during 2025.

What are ClickFix Attacks?

ClickFix attacks rely on a deceptive method that initially appears normal to the user. A web page appears and asks them to prove they are not a robot through a CAPTCHA test or a similar verification message. When the verify button is pressed, the malicious site automatically copies harmful commands into the device's clipboard without the user’s knowledge.
After that, the page displays instructions that look normal, such as pressing Win + R keys to open the Run window in Windows, then pasting the copied command using Ctrl + V and pressing Enter. Once these steps are executed, commands are run that allow malicious files to be downloaded or spyware and data theft software to be activated on the device.

How does the Paste Protect feature work?

Paste Protect relies on monitoring content that websites try to copy to the clipboard. When it detects suspicious commands or text specific to Windows, macOS, or Linux systems, it automatically prevents the copying process. The user is immediately warned of a potential attempt to execute an online attack, with a red icon appearing next to the address bar indicating that the website may be dangerous. The feature allows users to view the first 120 characters of the detected command and can mark the site as safe if they believe the warning was issued in error.

The threat posed by ClickFix attacks lies in their reliance on user interaction to execute harmful commands, enabling them to bypass some traditional protection systems. These attacks are often used to install information-stealing software like Lumma Stealer, which targets saved passwords, auto-fill data, and cookies used for automatic login to various accounts.

Opera confirmed that the Paste Protect feature will be enabled by default for all users, with the option to disable or re-enable it through browser settings in the "Privacy & Security" section. The company has already begun rolling out the update gradually to users worldwide and expects it to reach all regions in the coming period.

Opera continues to strengthen its security tools

The new feature is part of Opera’s efforts to enhance the browser’s security level, which is also known for providing integrated services such as a free VPN network and privacy protection tools and more efficient resource management. With the rise in cyber attacks that rely on social engineering and deceiving users, integrated security tools within browsers have become an important line of defense against modern digital threats.