Zealynx AcademyZealynx Academy
Defense

telegram · ClickFix — clipboard-to-terminal malware

The 'Safeguard' bot that wants your keyboard

Lynx 100 Lynx

Briefing

You just joined a project's Telegram group and a checkmarked 'Safeguard' verification bot DMs you before you can see the chat. It says the automatic check failed and walks you through pressing Win+R, pasting, and hitting Enter to 'unlock the group.' This is a simulated drill — no command will actually run on your machine.

What to watch for

  • A 'verification bot' telling you to press Win+R and paste
  • 'Verification failed — run it manually' as an excuse to touch your terminal
  • A command silently pre-loaded onto your clipboard

Simulated environment · nothing here is real, nothing runs, nothing sends.