Back to the glossary
    Social engineering & phishingCybersecurity glossary

    ClickFix

    An attack where victims run the malicious code themselves, following instructions from a fake verification step or error fix.

    Full definition

    ClickFix is a social engineering technique where the victim runs the malicious code themselves. A fake page shows a supposed security verification or an error that is fixed by following a few steps: copy a command, open the system's run dialog and paste it. That command downloads the malware.

    The technique bypasses much of the technical defense stack because there is no attachment or download for a filter to block: the action happens on the user's own machine, outside the reach of email security. Variants such as FileFix change the mechanism but keep the principle of turning the victim into the executor.

    The response combines blocking command execution for users who do not need it with training one simple principle: no legitimate verification ever asks you to paste commands into your system.

    Related reading on the blogGo deeper into this topic

    Related terms

    From definition to data: measure your company's human risk

    Fensivo detects leaked credentials, simulates real attacks and validates with retests that behavior changed.