ClickFix attacks fake CAPTCHA pages to trick users into running malicious commands, delivering malware through compromised websites.