ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits

Microsoft Threat Intelligence reported a new ClickFix attack that uses compromised websites to pre-fetch a malicious script into the browser cache, disguised as a PNG file. Users are tricked into executing the cached payload, bypassing Windows run limits that block remote downloads. The technique evades traditional security controls by leveraging the browser's cache.