New FileFix attack weaponizes Windows File Explorer for stealthy commands

FileFix is a newly demonstrated variant of the ClickFix social-engineering attack that tricks users into executing malicious PowerShell commands by using the Windows File Explorer address bar and the browser file-upload feature; the technique hides the payload in a commented dummy file path so the malicious command is not visible, and the researcher warns it could be quickly adopted by attackers given prior ClickFix use in ransomware and infostealer campaigns.