Fake 'AI-powered IQ test' on aiiqtest.xyz ends with ClickFix 'human check' telling users to run a command

What happened

MalwareTips reports an AI-powered IQ test scam at aiiqtest.xyz that advertises a two-minute test, asks ten questions and then places a supposed human check before the result. That check uses the ClickFix technique, asking visitors to use a Windows command-launching feature to run a command, which can let malicious software act on the computer. MalwareTips advises never running commands a website asks you to paste. It notes the exact payload was not independently executed, so no specific malware family is claimed.

How the scam works

MalwareTips describes four steps. A quick assessment makes taking part feel low-risk. Once the ten questions are done, the result is withheld behind an apparently routine human check. The check then asks the visitor to leave normal web interaction and use a Windows command-launching feature: open Windows Run, paste what the page has placed on the clipboard, and confirm execution.

This is the ClickFix technique. Because the visitor starts the command themselves, the page doesn't need to exploit the browser, and the command can begin a software attack on the computer. MalwareTips did not independently run the payload, so it claims no specific malware family.

Its advice is to never paste material from a web page into Windows Run or a terminal. If it was done, stop sensitive use of the device, scan it with genuine protection, avoid deleting unfamiliar files on guesswork and escalate unresolved signs. Report any unauthorised transactions or exposed financial details to the bank.

Source

MalwareTips, "AI-Powered IQ Test Scam Exposed: The Fake Human Check That Runs Malware" (published 26 October 2026).