Why Hackers Are Choosing Simplicity Over Sophistication: The Rise of 'ClickFix' Attacks

Cybercriminals aren't always chasing cutting-edge exploits — often, they just want something that works reliably, again and again. According to Microsoft's threat intelligence team, the most common way attackers broke into organisations last year wasn't a sophisticated hack, but a simple trick called ClickFix.

Here's how it works: a fake webpage asks visitors to complete a routine 'prove you're not a robot' check. While the person is distracted reading instructions, the page secretly copies a malicious command to their clipboard. The site then guides the unsuspecting user to open a terminal window on their computer and paste it in — effectively tricking them into running the attacker's code themselves. No advanced malware or technical exploit is required; it simply relies on people following instructions without questioning them.

This approach highlights a broader trend: attackers favour techniques that are cheap, easy to repeat, and don't require deep technical skill. Because ClickFix relies on human behaviour rather than software flaws, traditional security tools may not catch it every time. Awareness and scepticism are the best defences.