CLICKFIX: HOW TO INFECT YOUR PC IN THREE EASY STEPS

Summary from the TLDR InfoSec newsletter

The "ClickFix" scheme tricks users into downloading password-stealing malware disguised as CAPTCHA verification. Users press Windows+R, CTRL+V, and Enter, which activates the download through mshta.exe. Organizations can prevent this by disabling the run command for the Windows+R shortcut.