Fake Windows Update Notifications: ClickFix Malware Campaign Uses PNG Steganography ...

Winbuzzer • November 28, 2025

Share: View original

Cybercriminals are shifting to hiding malware in PNG images using steganography, bypassing Microsoft's recent block on SVG files in Outlook.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

ClickFix Malware Campaign Uses Fake Windows Updates to Deploy Infostealers A new wave of ClickFix attacks is utilizing fake Windows Update screens to deceive users into executing malicious commands that install infostealing malware. These attacks employ steganography to hide malware within PNG images, making them harder to detect. Organizations across the U.S., EMEA, and Asia-Pacific regions have been targeted since late September 2025. 24 sources 23

Extracted Entities

Attack Types (2)

Malware Steganography

Campaigns (1)

ClickFix Malware Campaign

Platforms (1)