Back Blog.Knowbe4

Warning: ClickFix Attacks are Growing More Sophisticated

Blog.Knowbe4 •KnowBe4 Team • November 12, 2025

Researchers at Push Security warn of an extremely convincing ClickFix attack posing as a Cloudflare verification check. ClickFix is a social engineering technique that tricks the victim into copying and pasting a malicious command, then running it on their computer.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Revival of Finger Command in ClickFix Malware Attacks Threat actors are exploiting the decades-old 'finger' command in new ClickFix malware attacks to execute remote commands on Windows devices. The command, which was historically used to retrieve user information on Unix and Linux systems, is being repurposed to facilitate remote command execution, raising security concerns for affected systems. 4 sources 40

Extracted Entities

Warning: ClickFix Attacks are Growing More Sophisticated

The full story

Extracted Entities

Attack Types (1)

Campaigns (1)

Companies (1)