ClickFix, the trick that fools people into running malware by hand, has quietly grown a back office.New research shows the malicious commands behind its fake “prove you’re human” pages are now handed out by API-driven servers that give each visitor the same malware in a different disguise. The same research also turned up a new delivery method built to slip past Windows’ script scanning.
First seen on thehackernews.com
Jump to article: thehackernews.com/2026/07/researcher-analyzes-3000-live-clickfix.html
