01/18/2026
Are you accidentally giving hackers free rein over your computer?
If you use ChatGPT, Grok, or other AI chatbots for tech support, you could be doing exactly that, without realizing it.
Here’s how it works:
You turn on your computer and see an error message. For this example, let’s say it says “Low disk space.” Naturally, you want to know how to free up space.
You open Google, type “How to clear up disk space,” and hit Enter. A list of results appears, along with paid Google ads at the top. You click the first result, which happens to be one of those paid ads.
You’re then taken to what looks like a legitimate ChatGPT page—but it’s actually a saved conversation that appears to provide step-by-step instructions on how to clear disk space. Everything looks normal and trustworthy.
You follow the instructions with no issue, nothing seems off until you reach a step that tells you to copy and paste a string of code into your command prompt.
You copy it, paste it, and click Run.
BAM. You’ve just given hackers full access to your computer, without triggering your antivirus or security software. By running that command, you unknowingly installed malware directly onto your system.
The attackers can now harvest your credentials, access your files, grant themselves administrator privileges, and establish persistence (meaning they can stay on your device long-term), all while bypassing traditional security defenses.
This type of attack, known as ClickFix, isn’t new, but it is evolving, and it’s becoming more convincing. Simply put, "ClickFixing" has become a sophisticated tech support scheme that weaponizes AI platforms like ChatGPT and Grok to trick users into self-infecting their devices with malware.
When attempting to fix a tech problem, be careful with the instructions you find online. Attackers often post fake fixes through sponsored search results or social media. Don’t follow steps you don’t understand, and be very cautious if you’re told to run commands in PowerShell or Terminal. That’s a common sign of a scam, even if the advice comes from a search engine or a tool you’ve trusted before.
When in doubt, it’s far safer to walk away than to risk losing everything to a hacker.
