ClickFix Was the Top Initial Access Method at 47%

ClickFix, a technique that asks website visitors to paste a command into their terminal, was the most common initial access method, meaning the first way an attacker entered a victim's systems, that Microsoft's team observed last year, accounting for 47% of the attacks in its notifications. That single statistic frames a larger finding from Bitdefender: attackers are not trying to be more ingenious, they are trying to be more repeatable.

A web page tells the visitor to prove they are not a robot. While the person reads the instructions, the site quietly places a command on their clipboard. Then it walks them through opening a terminal, which is the text-based command window built into every operating system, and pasting that command in. The technique is called ClickFix. Because nothing arrives as an attachment, there is no file to scan. Because no vulnerability is used, there is no patch to install. The attack depends on a person following instructions, not on the target's software.

What happens next is just as ordinary. Bitdefender analyzed 700,000 security incidents and found that 84% of high-severity cases involved binaries, or executable programs, that were already on the machine. These are the same administrative tools an IT team uses every day: scripting engines, remote management utilities, archive tools and built-in system programs. Nothing malicious needed to be installed, because the attacker simply used what was already there. Security teams call this living off the land.

Verizon's most recent Data Breach Investigations Report points in the same direction. Exploitation of vulnerabilities became 'the most prominent initial access vector' in that dataset, reaching 31% of cases, up from 20% the year before. That is a 55% increase in a single year in the one category that rewards scanning many targets over developing one clever attack. Edge devices, meaning routers, firewalls and other equipment reachable from the internet, are popular not because they are interesting but because the procedure is short. An attacker watches for new CVE identifiers, which are public catalogue numbers for known security flaws, in internet-facing devices. They filter for flaws that allow remote code execution, meaning someone can run commands on the device from outside, and that require no authentication, meaning no login. Then they wait. Someone usually publishes a working proof of concept, a demonstration that the flaw can be exploited, on GitHub within days. When that appears, the attacker scans the internet at scale and takes whatever has not been patched yet.

Nobody in that chain develops anything. The exploit arrives free from a researcher, on a public repository, on a schedule somebody else sets. The only capability required is the ability to run other people's code quickly and at volume. The author compares this to a generics drug manufacturer: it does not discover drugs, it waits for someone else's research to become public and then produces a known formula at volume. A cybercrime group following this playbook competes on speed and cost, not on invention.

The ransomware leaderboard, the list of criminal groups that publish stolen data to pressure victims to pay, shows the same preference. For more than a year, Qilin held the top position on ransomware leak-site rankings, claiming roughly 1,600 victims across that span, usually more than a hundred a month. In June it was displaced by The Gentlemen, with 121 claimed victims against Qilin's 80. These are figures the groups publish about themselves, so they are claims rather than audited numbers, but the two have been trading the top spot. What they compete on is throughput, not technical achievement. The more telling detail is where the challenger came from. The Gentlemen branched out from a former Qilin affiliate, and as Bitdefender's own threat debrief put it, they have demonstrated how successful ransomware playbooks are being recycled and improved. The procedure walked out of one organization and into another and worked just as well.

ClickFix is a playbook for getting in. There is no payload to rebuild when a detection lands, because there is no payload. There is no exploit to redevelop when a vendor ships a patch, because no vulnerability is being used. When a lure stops working, the attacker simply rewrites the text on a web page. The technique degrades gracefully, which is exactly what someone wants from something they intend to run thousands of times. It also works identically everywhere because it does not depend on the target's technology at all. It depends on a person being willing to follow instructions, and that is the one component present in every environment, in the same version, with no patch available.

Living off the land is the same idea carried further. Instead of bringing their own tools, attackers use what is already installed: the scripting engines, remote management utilities, archive tools and administrative binaries that ship with the operating system. These tools are familiar, present in every environment, and identical in every environment. An operator who learns the sequence once can run it at the next victim without adaptation. Command and control traffic is routed through cloud services the organization already trusts and permits. That these tools are also hard to distinguish from legitimate administration is a bonus, but it is not the main reason they were picked. It is, however, the part defenders find hardest: when an attacker introduces nothing, there is nothing to find.

The economics match the prediction. Verizon's report shows ransomware growing again, to 48% of all breaches, up from 44% the year before. Over the same period, the money moved the other way: 69% of ransomware victims did not pay, and the median ransom that was paid fell to $139,875 from $150,000. Bitdefender's own tracking of ransomware leak sites counted 704 organizations claimed as victims in June 2026 alone. More victims, less money. That is falling revenue per attempt, and the rational response is to make each attempt cheaper and more repeatable, and to run more of them.

This is where the AI argument meets arithmetic. The playbook approach costs an attacker close to nothing per attempt: the scanning is cheap, the exploit was free, and the tools were already installed on the victim's machine. Putting a model in that loop adds a real cost to every attempt, in a business that has spent years driving that cost towards zero. It also adds it in the wrong place. This is a volume operation aimed at whoever happens to be exposed, not a small number of large organizations where a bigger investment per target could be justified. Against a few high-value victims, paying for intelligence might pay back. Against a list of several thousand small businesses, it does not.

There is also a structural objection. An autonomous agent, meaning a program that acts on its own and improvises, explores an environment and finds a path tha