And the Winner in Dominant Malware Delivery? ClickFix

ReliaQuest research highlights the rapid rise of the ClickFix social‑engineering technique (first seen in 2024) that lures users into pasting malicious commands into system dialogs (Windows Terminal, macOS Script Editor) to deliver loaders and payloads such as Deepload and the Atomic/AMOS stealer. Attackers have expanded vectors (malvertising, emailed links, fake CAPTCHAs), targeted developers (leading to exposed tokens and persistent access), and adopted AI‑generated obfuscation, prompting recommendations for cross‑platform monitoring, user training, and logging/alerting of suspicious command execution sequences.