Skip to content

ClickFix social engineering lure

Named by 2 kept items in this workspace.

Search every workspace for ClickFix social engineering lure. It matches the name as written, so it can find other things that share it.

The items that name it 2

  • How Huntress Detects and Responds to a ClickFix Attack
    writeup2026-10-05

    Fake CAPTCHA/human-verification page instructs victim to press Windows+R and paste a command; padding text (dashes) scrolls the real malicious command out of view of the narrow Run dialog field, leaving only a fake instruction ('Push the Enter key') visible.

  • ClickFix Gets Creative: Malware Buried in Images
    writeup2025-11-24

    Tricks victims via fake 'Human Verification'/robot check or fake Windows Update splash screen into pressing Win+R and pasting a malicious command with Ctrl+V

All techniques in this workspace.