AI ClickFix: Hijacking Computer-Use Agents Using ClickFix
Brief
Today we are going to discuss how real-world tactics, techniques, and procedures (TTPs) apply to computer-use systems, specifically, we’ll look at ClickFix attacks. This demo was part of my presentation at the SAGAI Workshop on May 15th, 2025 in San Francisco.
It was a great workshop, with tons of interesting insights and discussions.
So, let’s talk about ClickFix , and how it applies to AI systems!
What is ClickFix?
ClickFix is a social engineering technique that is being used by adversaries. At a high level it tricks users by telling them something is broken or needs validation, and they have to click a button, open a terminal and run commands on their computer.