ClickFix

ClickFix is a social engineering technique that uses fake errors or CAPTCHAs to trick users into pasting and running a malicious command on their own computer. In the first quarter of 2026, seven active ClickFix variants were observed, from fake update prompts and meeting joins to AI tool onboarding and compliance workflows.