Uploaded September 2025 | Updated September 2026, 2 weeks ago
Sponsored: Get 90 Days of Bitdefender Premium Security - Absolutely Free: bitdefend.me/90ThioJoe
Bad actors have figured out a new way to trick people that is surprisingly effective. Instead of trying to get them to download and run malicious files, they instead trick people into running a command which downloads and runs the files. Without the person even knowing they downloaded anything. Usually they'll have some web page with a fake captcha, or some other thing that gives the user some reason they need to open the Run box and paste in text (which ends up being the malicious command). They may also have them paste it into the command prompt or run it via a special Windows protocol. So in this video I show you examples and how it all works so you can watch out for it. Simply knowing about these should be enough to protect yourself.
Time Stamps:
0:00 - Intro
0:17 - How The Strategy Works
1:14 - What The Sites Actually Do
2:11 - If You Run The Malicious Command
3:35 - Why is it Called “ClickFix”?
3:48 - Very Good Thing
5:04 - More Variations
7:03 - It Also Affects MacOS
7:38 - The Commands Themselves
8:20 - Protecting Yourself
8:56 - Why it’s Becoming More Common
Sponsored: Get 90 Days of Bitdefender Premium Security - Absolutely Free: bitdefend.me/90ThioJoe
Bad actors have figured out a new way to trick people that is surprisingly effective. Instead of trying to get them to download and run malicious files, they instead trick people into running a command which downloads and runs the files. Without the person even knowing they downloaded anything. Usually they'll have some web page with a fake captcha, or some other thing that gives the user some reason they need to open the Run box and paste in text (which ends up being the malicious command). They may also have them paste it into the command prompt or run it via a special Windows protocol. So in this video I show you examples and how it all works so you can watch out for it. Simply knowing about these should be enough to protect yourself.
Time Stamps:
0:00 - Intro
0:17 - How The Strategy Works
1:14 - What The Sites Actually Do
2:11 - If You Run The Malicious Command
3:35 - Why is it Called “ClickFix”?
3:48 - Very Good Thing
5:04 - More Variations
7:03 - It Also Affects MacOS
7:38 - The Commands Themselves
8:20 - Protecting Yourself
8:56 - Why it’s Becoming More Common
