Plan
active
Chrome adds ClickFix social engineering warnings in Enhanced Protection
- Engineer — Learn: Chrome’s new safeguard is a browser-side control, not something requiring code or config changes. Worth knowing as context for why endpoint detections of clipboard-paste execution remain important.
- SOC/IR — Plan: ClickFix attacks drive malicious command execution via clipboard paste, often evading EDR. Consider tuning detections for suspicious shell processes spawned from browser child processes or unusual clipboard-to-terminal patterns.
- Leader — Skip
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.