Why Our Own Clicks Are Often Cybercrime’s Greatest Allies

Cybercriminals increasingly rely not on sophisticated zero-day exploits, but rather on human error and everyday digital habits to gain entry. According to the Verizon Business 2025 Data Breach Investigations Report, nearly 60 % of security breaches involved the human element.

Attackers are exploiting familiar interactions — such as clickable delivery-notifications, password-reset prompts or verification pop-ups — to trick users into handing over access or installing malicious software.

More alarming: even protection tools themselves are being manipulated. Multi-factor authentication (MFA) flows and “verify you’re human” prompts have been weaponised, making users believe they are completing legitimate security processes when in fact they are enabling access for the attackers.

The author argues that technology alone cannot fix the problem; the true “human firewall” lies in awareness, critical thinking and a healthy dose of skepticism for every email, link or popup.