New ClickFix Campaign Uses Cmdkey and Regsvr32 To Evade Detection

**ClickFix Evades Detection Tools:** CyberProof researchers describe a stealthy ClickFix campaign that uses a social-engineered Run dialog paste to execute chained cmd.exe commands which leverage native utilities (cmdkey to store credentials, regsvr32 to load a remote DLL via UNC) and establish persistence by creating a scheduled task that pulls its configuration from a remote XML, enabling fileless updates and evasive long-term access; the report provides behavioral detection and mitigation recommendations.