Threat Actors Don’t Want Better Attacks. They Want Repeatable Ones

Threat Actors Don’t Want Better Attacks. They Want Repeatable Ones The Hacker NewsSep 01, 2026Social Engineering / Endpoint Security The most common way into a company last year was to ask. A web page tells the visitor to prove they are not a robot. While they read the instructions, it quietly places a command on their clipboard. Then it talks them through opening a terminal and pasting it in. The technique is called ClickFix, and it was the most common initial access method Microsoft’s team observed last year, accounting for 47% of the attacks in their notifications. Nothing arrives as an attachment, so there is nothing to scan. No vulnerability is used, so there is nothing to patch. What happens…