Attacks and malware
What is ClickFix?
A social engineering trick where a fake error or CAPTCHA page tells the user to paste and run a command, which installs malware.
ClickFix is a social engineering technique in which a web page shows a fake browser error, document problem or CAPTCHA and tells the user how to "fix" it: press Win+R, paste with Ctrl+V and press Enter. The page has already copied a malicious command to the clipboard.
Because the user runs the command themselves, it skips many download and attachment protections. The technique spread widely from 2024 and has been used to deliver infostealers and remote access tools.