Public reference index
The public record of ClickFix campaigns
ClickFix attacks persuade you to paste a command into the Windows Run dialog or the macOS Terminal, usually behind a fake CAPTCHA. This is a free, permanent, fully attributed index of the campaigns that have been publicly reported — and the indicators that came with them.
Defanged input works too — example[.]com and hxxps://example[.]com both resolve.
- —
- Campaigns
- —
- Indicators
- —
- Unique domains
- —
- Sources credited
Did you already paste something?
Act now, not later. These take about two minutes to read.