{"id":11513,"date":"2025-07-14T12:53:25","date_gmt":"2025-07-14T05:53:25","guid":{"rendered":"https:\/\/infosec.new88088.net\/?p=11513"},"modified":"2026-06-25T10:01:44","modified_gmt":"2026-06-25T03:01:44","slug":"clickfix-enables-hackers-to-take-control-of-computers-with-a-simple-paste","status":"publish","type":"post","link":"https:\/\/infosec.new88088.net\/en\/2025\/07\/14\/clickfix-enables-hackers-to-take-control-of-computers-with-a-simple-paste\/","title":{"rendered":"“ClickFix” enables hackers to take control of computers with a simple paste."},"content":{"rendered":"

ClickFix \u2013 phishing is expected to explode in cyberattack campaigns in 2025. Unlike traditional attacks via scam emails or malicious attachments, this tactic uses the “fast fix” mentality to get users to run their own malicious commands. <\/b><\/p>\n

\"1752477958423.png\"<\/a>\u200b<\/div>\n

ClickFix is a social engineering hack in which bad guys impersonate technicians or major tech brands such as DocuSign, Okta, providing “debug instructions” for common problems such as driver errors, annoying pop – ups, or login errors. As a result, hackers can take control of computers, steal data, and even pave the way for ransomware attacks.<\/p>\n

But instead of correcting the actual error, this tutorial requires the user to copy-paste a command fragment (usually PowerShell) into the Run box (Win+R) or terminal window (Wins+X) on Windows. This command is pre-installed in the clipboard via malicious JavaScript code from fake websites, malicious ads, fake tutorial videos, or “pseudo” technical support forums – a technique also known as pastejacking.<\/p>\n

The danger is that there are no malicious attachments, no deceptive links, and it’s the user who runs the malicious code without knowing it.<\/p>\n

In 2025, attack groups have incorporated ClickFix into multiple campaigns spreading spyware and malicious code that hijack remote control, including:<\/p>\n