A ClickFix attack can come in all shapes and sizes, including through compromised WordPress websites.