COMING SOON
ClickNix Browser Extension
“The ClickFix Destroyer”
A lightweight browser extension for Chrome and Edge that automatically detects and blocks dangerous ClickFix malware scams before they reach your screen and alerts defenders to protect other users from it until it is fixed.
Quick Link
COMING SOON
Description & Details
ClickNix is a preemptive security extension that disrupts ClickFix attacks before they can execute and acts as a community driven sensor to alert other defence systems to avoid accessing compromised sites until they are clean.
What it Does
-
Prevents a ClickFix attack from being able to execute in the browser and warns the user about the danger.
-
Notifies a central database that a community of defenders use to prevent other users from being hurt by websites that are newly compromised with ClickFix Attacks. The community can notify site owners that their sites have been compromised to allow them to fix it.
-
The central database service runs test against the compromised site to let the community know when the site has been fixed and is safe to use again.
Background
A ClickFix attack is a social engineering (human manipulation) technique that allows attackers to compromise victims’ computers by abusing the Command Line Interface / Terminal / PowerShell to create backdoors or install malware. It masquerades as a Captcha or ”Proof that you are human” test to get the victim to run commands that compromise their computer.
This technique is described under MITRE ATT&CK ID: T1204.004 User Execution: Malicious Copy and Paste, Sub-technique T1204.004 - Enterprise | MITRE ATT&CK®
ClickFix in 2026 is reported to be part of the malware attack chain in over 50% of cases. It leaves a large swath of internet users unprotected and vulnerable, especially those who need protection the most.
A big problem of this technique is that it bypasses most antivirus or security systems due to how it operates as a “Living off the Land” attack. Trusted websites are often compromised with this attack without any warning which gives another advantage to the attackers.
Why we created this
In our mission to protect people and their systems ADAMnetworks makes this security tool free for use for all potential victims - which is essentially all humans that are not in a Zero Trust connected environment yet.
This extension disrupts ClickFix attacks before they can execute and acts as a community watchdog sensor to let other defenders know which sites have been compromised for ClickFix attacks so they can protect against access. Defenders are also notified when the compromises have been resolved so access to sites can be safely restored.
For best results we recommend you update to the latest version frequently.
Key Benefits
-
Instant Proactive/Preemptive Protection: Blocks freshly compromised sites and dangerous web threats in real time, even if they use novel combinations of known attack methods.
-
Community-Powered Security: When a new threat is blocked, its data is anonymously shared with the ADAMnetworks WatchTower threat feed.
-
Ecosystem-Wide Defense: By sharing this intelligence with partners like Quad9, your protection helps secure broader networks—including devices relying solely on protective DNS without the extension installed.
Platform Support & Installation Links
ClickNix works across Windows, macOS, Linux, and Android (via Kiwi).
-
Chromium-based Browsers: Brave, Vivaldi, Microsoft Edge, and Chrome (Install ClickNix)
-
Mobile Support: Kiwi Browser on Android (Install ClickNix)
| Feature | How It Works | Why It Matters To You |
|---|---|---|
| Instant Memory Scanning | Downloads and inspects web page HTML directly inside your browser’s local memory before it renders. | Catches threats before malicious code ever has a chance to execute on your machine. |
| Dynamic Threat Rules | Uses continuous YARA rule updates maintained directly by ADAMnetworks security researchers. | Keeps your protection current against brand-new, evolving attack tactics automatically. |
| Zero-Telemetry Privacy | Performs all threat detection entirely in-browser without sending your activity to external servers. | Ensures full data sovereignty—your personal browsing history never leaves your device. |
| Community Threat Sharing | Submits only the anonymized web address (FQDN) to the ADAMnetworks Watch Tower when a threat is blocked. | Helps improve global security intelligence without exposing your personal information or IP. |
Enterprise Integration & Data Privacy
ClickNix is built with strict privacy standards and flexible enterprise capabilities:
-
Source-Anonymized Intelligence: Threat data collected during a blocking event contains only the Fully-Qualified Domain Name (FQDN), ensuring zero user activity or identity is attached.
-
Custom Enterprise Routing: Enterprise License available. Organizations requiring custom licensing, modified builds or to route threat telemetry directly to their own SIEM can contact our team.
For more information related to Privacy, see the ADAMnetworks® Privacy Policy