Unverified50% confidenceFactExact time
ClickFix lures users into pasting and executing malicious commands in the Windows Run dialog through a fake CAPTCHA page.
1
Sources
50%
Confidence
Long-term
Relevance
9/21/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedClickFix bypasses automated system protection mechanisms by having users actively copy, paste, and run commands, because the system treats this as a legitimate user action.78% similarUnverified恶意站点可利用伪造的OAuth授权请求，在真实页面上诱导用户授权，从而无需获取密码即可控制账号70% similarVerified间接提示注入可将恶意指令藏入外部数据源（如网页、文档），待代理读取时自动触发攻击63% similarUnverified跨站提示注入攻击指A网站的恶意内容可能污染智能体处理B网站任务时的行为62% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/938229API
curl https://kongchang.com/api/v1/knowledge/claims/938229MCP
get_claim(id=938229)