GoKawiilClickFix phishing technique surges, now disguised as AI tool installs
Push Security reports that ClickFix, a phishing technique that tricks users into running malicious commands, accounted for an average 52% of its detections through Q2 2026, rising to 67% in August. Newer variants impersonate AI tools like Claude and ChatGPT, with ANY.RUN linking over 1,200 sandbox analyses to fake AI campaigns between April and October 2026, 81% of which impersonated Claude or ChatGPT/Codex.