Other
ClickFix
2024ActiveUpdated: 22 September 2026Published
Key
innovation
Shifting the final attack step onto the user, who runs the malicious command themselves.
Category
Other
Abstraction level
Pattern
Operation level
System
Use cases
Malware distributionInfostealers and RATsSocial-engineering attacks
How it works
A fake prompt instructs the victim to copy a supplied command and run it (Win+R / PowerShell / terminal), leading to infection.
Problem solved
Traditional protections (download filters, browser warnings) don't help when the user knowingly runs the command.