ClickFix: How to Infect Your PC in Three Easy Steps

**Executive Summary:** The report details the "ClickFix" scam — a widespread phishing/campaign technique that lures users with fake CAPTCHA or error popups and instructs them to press a sequence of keys (Win+R, Ctrl+V, Enter) to execute mshta.exe, resulting in the download and execution of multiple credential‑stealing malware families (e.g., XWorm, Lumma stealer, VenomRAT, AsyncRAT, Danabot, NetSupport RAT); targets include hospitality and healthcare organizations, and delivery occurs via compromised/malicious websites and phishing emails with HTML attachments.