ClickFix
ClickFix is a social-engineering technique in which a web page tells the visitor to fix a fake error by pasting a command (copied to the clipboard by the page) into the Run dialog or a terminal, which installs malware.
How it works
The page shows a fake browser error, document viewer or CAPTCHA. A button silently copies a PowerShell or shell command to the clipboard, and the instructions tell the user to press Win+R, paste and press Enter.
Because the victim runs the command themselves, many browser and email protections never see a download.
How to protect yourself
- No website needs you to paste anything into Run, PowerShell or Terminal. Close the page.
- If you already ran it, disconnect the device and treat stored passwords and wallets as compromised.