ClickFix has never been bigger, and AI tools are its most convincing lure yet
-
ClickFix attacks are surging at an unprecedented scale, with cybercriminals increasingly relying on fake AI tool installers, poisoned search results, and trusted chatbot platforms to convince users into running malware themselves. According to analysis by Push Security, these campaigns are notable for how effectively they bypass traditional security defenses.
The core of the technique relies on social engineering rather than exploitation: victims are walked through pasting a command into a Run dialog or terminal, which fetches and executes the payload. Because the user performs the action voluntarily, conventional protections often fail to flag the activity.
What makes the current wave stand out is the lure. AI tools have become the most convincing pretext yet, with fake installers for popular AI software and malicious search results directing users toward the trap. Attackers are also abusing trusted chatbot platforms to deliver the instructions, lending the attacks an air of legitimacy.
Key points from the research:
- ClickFix activity is at its highest level to date.
- Fake AI installers and malicious search results are primary distribution vectors.
- Trusted chatbot platforms are being leveraged to deliver the malicious instructions.
- The approach evades traditional defenses by relying on user-executed commands.
There is no specific CVE or advisory identifier associated with this campaign in the source reporting, so none is cited here. Organizations should treat unsolicited instructions to paste commands into a terminal or Run dialog as a red flag, and user awareness training remains the most direct mitigation against this style of attack.
Source: BleepingComputer
Has your organization seen an uptick in ClickFix-style lures, and how are you training users to spot them?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login