ConsentFix Attacks Fake Cloudflare Prompts

This advisory explains 'ClickFix' and 'ConsentFix' social-engineering attacks where malicious sites or poisoned search results trick users into clicking buttons or copying/pasting code/URLs—often resulting in malware execution or credential compromise; it highlights advanced techniques (AES-encrypted payloads hidden in PNGs, fake Cloudflare turnstiles) and recommends educating users not to copy/paste untrusted code or follow dubious prompts.