ClickFix Attack Uses Steganography to Hide Malware in Fake Windows Security Update

Gbhackers •Mayura Kathir • November 25, 2025

GBHackers on Security is a top cybersecurity news platform, delivering up-to-date coverage on breaches, emerging threats, malware, vulnerabilities, and global cyber incidents.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

ClickFix Malware Campaign Uses Fake Windows Updates to Deploy Infostealers A new wave of ClickFix attacks is utilizing fake Windows Update screens to deceive users into executing malicious commands that install infostealing malware. These attacks employ steganography to hide malware within PNG images, making them harder to detect. Organizations across the U.S., EMEA, and Asia-Pacific regions have been targeted since late September 2025. 24 sources 23

Extracted Entities

ClickFix Attack Uses Steganography to Hide Malware in Fake Windows Security Update

The full story

Extracted Entities

Attack Types (2)

Campaigns (1)

Platforms (1)