ExecFence

There is a whole class of attack that never breaks into your browser at all - it convinces you to do the break-in yourself. A page shows a CAPTCHA or an error, tells you to press a couple of keys, open Terminal or PowerShell, paste "the verification command" and press Enter. The command it quietly put on your clipboard downloads and runs someone else's program on your computer. Your antivirus sees a normal terminal doing normal things, because a person opened it. ExecFence sits exactly on that line. It watches for the tell-tale combination - a verification or error story, an instruction to leave the browser, and a real command placed on your clipboard - and steps in before the paste, in plain language: what the page asked you to do, what the command would actually do, and a one-click way to clear the clipboard and close the tab. It is built to be quiet on the pages developers really do copy commands from, loud only when a page is trying to trick you, and private by default: the checking happens on your own machine and what you copy is never sent anywhere. ClickFix is the first attack it covers; the same idea guards against fake browser updates, fake tech support and wallet-draining copy tricks next.