Document Verification
Additional verification required to open this document
Verification failed: this browser could not be confirmed automatically. Complete the manual check below to finish loading the shared document.
A real ClickFix lure claims the document cannot load until you prove you are not a bot, then walks you through pasting a command into the Windows Run dialog. The command is the whole attack: in the wild it fetches and runs malware.
On this demo page the command is harmless and fixed. It prints a single marker and exits. It downloads nothing, changes nothing, needs no network and is shown for illustration only; this static page cannot copy anything to your clipboard.
- Press Win + R to open the Run dialog.
- Press Ctrl + V to paste the verification command.
- Press Enter to finish the check.
Command the lure tells you to paste
cmd /c echo SUBLIME_CLICKFIX_DEMO| Technique | ClickFix (paste-and-run social engineering) |
|---|---|
| What a real lure runs | A command that fetches and runs malware |
| What this demo runs | A fixed, inert marker that prints and exits |
End page for the ClickFix browser-verification sample. The danger in a real ClickFix attack is the command the page instructs the victim to paste and run, not the page itself. This demo keeps that command constrained to one harmless marker so the technique is visible with no risk. Detection keys on the lure message and the paste-and-run instructions, not on anything this page does.