ClickFix 2.0: AI Lures and Command Injection Phishing in 2026

The ClickFix Threat Escalates

Social engineering attacks have entered a new phase. This week, Google announced Chrome protections specifically targeting ClickFix attacks—a family of scams that trick users into copying and executing malicious commands on their own systems. The timing is no coincidence: BleepingComputer reports that ClickFix has never been bigger, and AI tools are now its most convincing lure.

Unlike traditional phishing that relies on malicious attachments or links, ClickFix attacks manipulate users into becoming their own attack vector. The victim copies a command, pastes it into PowerShell or Command Prompt, and unknowingly installs malware. The social engineering is so effective because it masquerades as legitimate troubleshooting, software installation, or security verification.

How ClickFix Attacks Work in 2026

The core mechanic is deceptively simple:

1. The lure: Victims encounter fake error messages, CAPTCHA prompts, or installation instructions on compromised or malicious websites
2. The payload: A command string is presented, often with instructions like "Copy and paste this into PowerShell to fix the issue" or "Run this command to verify your system"
3. The execution: The victim copies the command, opens a terminal, and runs it—bypassing most security controls because the action originates from a trusted user session
4. The compromise: The command downloads and executes malware, often stealers like Lumma or remote access trojans

Dark Reading documented a particularly creative variant this week: attackers used malicious Google search results related to Amazon, then leveraged the decades-old Windows finger utility to launch a fake CAPTCHA that installed the Lumma stealer.

The finger utility, designed for querying user information on remote systems, can retrieve arbitrary text—including Base64-encoded PowerShell commands. Because it's a legitimate Windows binary, it doesn't trigger most endpoint detection systems.

AI Tools as the Perfect Bait

The most dangerous evolution in 2026 is the shift to AI-themed lures. As businesses and individuals rush to adopt AI tools, attackers are creating:

• Fake ChatGPT, Claude, or Gemini "desktop clients" that require command-line installation
• Malicious search results for "install AI assistant" or "download GPT locally"
• Fraudulent browser extensions claiming to enhance AI chatbot capabilities
• Fake API key generators for OpenAI, Anthropic, or other AI platforms

These lures exploit two psychological triggers: urgency around AI adoption and the normalization of command-line interactions in developer and power-user communities. When a site claims "our AI tool requires PowerShell installation for security reasons," many users don't question it.

Push Security's analysis notes that trusted chatbot platforms are also being weaponized—attackers inject malicious instructions into prompts, tricking users into running commands they believe are AI-recommended solutions.

Red Flags Every User Should Recognize

ClickFix attacks rely on users not recognizing the warning signs. Train your team to spot these red flags:

Suspicious Command Characteristics

• Obfuscated or encoded strings: Legitimate commands are rarely Base64-encoded or use multiple layers of string concatenation
• Download-then-execute patterns: Commands that use Invoke-WebRequest, wget, curl, or certutil to download files, then immediately run them
• Hidden execution: Commands containing -WindowStyle Hidden, -NoProfile, or attempts to suppress output
• Unusual utilities: Use of mshta, regsvr32, finger, or other rarely-used Windows binaries

Context Red Flags

• Any website asking you to "fix" a problem by running PowerShell
• CAPTCHA challenges that require command-line interaction
• "Installation instructions" for popular software that bypass official installers
• Error messages on websites you don't recognize or weren't trying to access
• Search results for software downloads that lead to unfamiliar domains

Specific Command Patterns to Block

If you see these in any "helpful" command, stop immediately:

Invoke-Expression (New-Object Net.WebClient).DownloadString(...)
iex (iwr ...).Content
powershell -enc <base64 string>
mshta http://...
regsvr32 /s /u /i:http://... scrobj.dll

These are the signatures of malware delivery, not legitimate software installation.

Chrome's New Defenses

Google's response demonstrates how seriously the industry is taking this threat. Chrome's Enhanced Protection mode now includes:

• Real-time warnings when users copy suspicious command strings from websites
• Server-side analysis using Gemini to detect deceptive sites and social engineering attempts
• Scam detection that evaluates page content, not just URL reputation

To enable these protections: Chrome Settings → Privacy and Security → Security → Enhanced Protection. The feature uses privacy-preserving techniques, sending page content to Google's servers only when suspicious patterns are detected.

These protections won't catch everything—particularly attacks on internal networks or via messaging platforms—but they're a significant step forward.

Organizational Defenses

For IT managers and security teams, ClickFix attacks demand a multi-layer response:

Technical Controls

• Constrained execution policies: Use PowerShell Constrained Language Mode and execution policies to limit what scripts can run
• Application control: Tools like AppLocker or Windows Defender Application Control can block execution from user-writable directories
• Command logging: Enable PowerShell script block logging and monitor for suspicious patterns
• DNS filtering: Block known malware distribution domains at the DNS level

User Education

• Regular phishing simulations that include ClickFix scenarios
• Clear guidance: "Never run commands from websites unless you understand exactly what they do"
• Establish a process for users to verify suspicious instructions with IT before executing

Monitoring and Response

• Alert on PowerShell execution with network connections to external IPs
• Monitor for use of utilities like mshta, regsvr32, and certutil with remote resources
• Implement EDR solutions that can detect and block malicious command execution in real time

The Broader Context

ClickFix attacks represent a fundamental shift in phishing tactics. Rather than trying to evade security tools, attackers are manipulating users into bypassing them entirely. This aligns with broader trends we're seeing in 2026:

• Supply chain attacks that compromise legitimate software distribution
• AI-themed social engineering exploiting the hype and confusion around new technology
• Living-off-the-land techniques that abuse built-in system tools rather than deploying custom malware

The common thread is attackers optimizing for the path of least resistance. When endpoint security improves, they shift to user manipulation. When users become skeptical of attachments, they move to commands.

What to Do Right Now

1. Enable Chrome Enhanced Protection on all managed devices
2. Audit PowerShell execution policies and implement logging if you haven't already
3. Brief your team on ClickFix tactics, especially anyone in technical roles who regularly uses command-line tools
4. Review your security awareness training to include command injection scenarios
5. Test your monitoring: Can your SOC detect when a user runs powershell -enc followed by a network connection?

ClickFix attacks succeed because they exploit the gap between user awareness and technical sophistication. Closing that gap requires both better tools and better training.

If you need help assessing your organization's exposure to social engineering attacks or want to test your team's readiness with realistic phishing simulations, Vici Tech Solutions can help.