Microsoft observed ClickFix attacks using browser cache smuggling to execute cached VBScript and launch a credential-targeting malware chain.
ClickFix attacks fake CAPTCHA pages to trick users into running malicious commands, delivering malware through compromised websites.