● Covered by 1 source · 1 reportMedium impact1 neutral
ClickFix Attacks Increasingly Target AI Tool Users, Becoming Dominant Phishing Method
Key points
- ClickFix attacks comprise 52% of Push's detections in Q2 2026.
- AI tools are the newest lure, exploiting terminal installs and direct searches.
- 81% of fake AI tool campaigns impersonated Claude or ChatGPT/Codex.
- 4 in 5 ClickFix pages are reached via search engines.
ClickFix Dominance in Phishing Landscape
ClickFix, a phishing technique emerging around 2024, has become a primary method for criminals. It has expanded in volume and variety, including sub-techniques like FileFix, InstallFix, TerminalFix, and ConsentFix. Push's detection data indicates that ClickFix constituted an average of 52% of its detections in Q2 2026, surpassing other phishing types like AiTM and device code phishing. In August 2026, this figure reached 67%.
AI Tools as New Lures for ClickFix Attacks
The latest variants of ClickFix attacks are leveraging AI tools as bait. AI-themed InstallFix and LLMshare attacks represented approximately 5% of all attacks detected by Push in its most recent quarterly snapshot, indicating a growing trend. This strategy targets users searching for and utilizing AI tools, often blending with legitimate traffic for approved generative AI applications.
Exploiting New User Habits
The effectiveness of these AI-themed lures stems from two habits adopted by users due to widespread AI adoption. First, many users now install tools directly from the terminal, as is common with applications like Claude Code. This makes them susceptible to pasting malicious commands from fake installation pages. Second, users frequently search for AI applications rather than navigating directly to them, increasing their exposure to compromised websites, malvertising, and SEO poisoning that lead to ClickFix pages. Four out of five ClickFix pages intercepted in 2026 were accessed through search engines.
Industry-Wide Trend
Other researchers corroborate this trend. ANY.RUN identified 1,258 public sandbox analyses linked to fake AI tool campaigns between April 15 and October 5, 2026. Of these, 81% impersonated popular AI models such as Claude or ChatGPT and Codex. A significant portion, at least 45%, involved campaigns instructing victims to paste commands via fake CLI install pages or download pages utilizing ClickFix. Another quarter originated from shared AI chats or artifacts.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Reporting from
ClickFix phishing attacks, which trick users into pasting malicious commands, now frequently use AI tools as lures, making up 52% of Push's detections in Q2 2026. This shift exploits new user habits like terminal installations and direct searches for AI applications, increasing the effectiveness and prevalence of these attacks.