ClickFix has abandoned its habit of knocking at PowerShell and has taken up residence directly inside the browser. Cisco Talos has disclosed a campaign in which the victim is invited to paste JavaScript into Chrome's address bar or to install it via Tampermonkey. Once executed, the code operates within the page itself and requires no separate malicious program on the system.