The ClickFix Deception
Plays from YouTube in privacy-enhanced mode — nothing loads from YouTube until you press play.
A familiar browser prompt can be a pretty convincing disguise. ClickFix attacks use fake verification pages to manipulate people into running malicious commands themselves. The interesting part is how an ordinary-looking interaction can turn into code execution on a local machine. Full video: https://youtu.be/oJHOlNTH7lY?si=Oo1Cqr1PdgP4GhBc
Description from John Hammond.