ClickFix has never been bigger, and AI tools are its most convincing lure yet

ClickFix is a family of browser-based attack techniques that have surged since 2024, now comprising a majority of detected browser attacks. The attacks use fake AI tool installers and malicious search results to trick users into running commands that deliver malware directly in memory, evading endpoint detection. Attackers exploit common AI adoption behaviors, such as copying terminal install commands from web pages and searching for AI tools via search engines, to deliver malicious payloads. Techniques include InstallFix, which clones legitimate install pages but replaces commands with malicious ones, and LLMshare, which abuses AI chatbot sharing features to host malicious instructions or links on trusted AI platforms. The attacks use cloaking, compromised legitimate sites, and blockchain-based payload configuration to evade detection and takedown. Microsoft Defender observed over 1.1 million unique devices executing ClickFix commands in early 2026, with a 96.3% malware conversion rate.

ClickFix attacks lead to widespread malware infections by tricking users into executing malicious commands in legitimate shells, bypassing email security, URL reputation checks, and endpoint detection. The attacks have infected over a million devices in early 2026 alone, with a high success rate of malware delivery. The use of legitimate domains, compromised websites, and AI platforms for hosting lures complicates detection and mitigation. The attacks enable initial access for further compromise and malware deployment.

No official patch or fix is available as ClickFix is a social engineering and delivery technique rather than a software vulnerability. Mitigation focuses on user education to avoid running commands from untrusted sources, especially when installing AI tools. Security teams should monitor for suspicious command execution patterns and improve detection of in-memory payloads. URL reputation and email gateway controls are insufficient alone due to the use of legitimate domains and search engine delivery. Endpoint security solutions should be tuned to detect anomalous shell command behavior. Organizations should also monitor for shadow IT and unauthorized AI tool adoption to reduce exposure.