ClickFix has never been bigger, and AI tools are its most convincing lure yet

ClickFix attacks are experiencing a significant surge in activity, with cybercriminals leveraging fake AI tool installers and malicious search results to deceive users into executing malware. Attackers are impersonating trusted chatbot platforms and AI applications to make their lures more convincing and harder to detect. Push Security has analyzed how these attacks successfully evade traditional defense mechanisms. The technique relies on social engineering, tricking users into manually running malicious commands or scripts. AI-themed lures have proven particularly effective due to widespread public interest in AI tools. The campaign highlights a growing trend of threat actors exploiting emerging technology trends to increase attack success rates.