ClickFix, the trick that fools people into running malware by hand, has quietly grown a back office.

New research shows the malicious commands behind its fake "prove you're human" pages are now handed out by API-driven servers that give each visitor the same malware in a different disguise. The same research also turned up a new delivery method built to slip past Windows' script scanning.



Source: TheHackerNews
Source Link: https://thehackernews.com/2026/07/researcher-analyzes-3000-live-clickfix.html