Unverified50% confidenceFactExact time
ClickFix is a social engineering attack technique that tricks users into copying a command and pasting it into a system Run dialog or terminal to execute it, thereby downloading and executing a malicious payload.
1
Sources
50%
Confidence
Long-term
Relevance
10/10/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedThe commands executed via ClickFix are often obfuscated PowerShell or mshta instructions that pull the next-stage malicious payload from a remote CDN; because the download and execution occur within a system process rather than a browser sandbox, they can bypass protective layers such as SmartScreen.67% similarUnverifiedVia webhooks, the system can automatically trigger a coding agent after an Issue is created, having it attempt to produce a Pull Request directly based on the description.67% similarVerifiedThe essence of a web crawler is to use a program to simulate the human behavior of opening a webpage, browsing content, finding target data, and saving it — that is, to automate and scale the actions of a human browsing the web65% similarUnverifiedBrowser automation agents repeatedly read webpage content and generate chain-of-thought reasoning to infer the next action, a process that is extremely token-intensive.60% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/995246API
curl https://kongchang.com/api/v1/knowledge/claims/995246MCP
get_claim(id=995246)