Threat actors are employing a new variation of the ClickFix social engineering technique called InstallFix to convince users into running malicious commands under the pretext of installing legitimate command line interface (CLI) tools. [...]
Fake Claude Code install guides push infostealers in InstallFix attacks
Summary + source link. No paywalls, no tracking.