New ClickFix Attack Uses Fake Windows BSOD Screens to Trick Users into Executing Malicious Code

Cybersecuritynews •Tushar Subhra Dutta • January 6, 2026

A sophisticated malware campaign called PHALTBLYX has emerged, combining social engineering deception with advanced evasion techniques to compromise hospitality sector organizations. The attack chain begins with phishing emails impersonating Booking.com, featuring urgent reservation cancellation alerts with large financial charges displayed in euros. These messages direct victims to fake Booking.com websites that appear visually identical to […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

ClickFix Campaign Uses Fake BSOD Screens to Distribute Malware in Hospitality Sector A ClickFix social engineering campaign is targeting the hospitality sector in Europe by using fake Windows Blue Screen of Death (BSOD) screens. This tactic tricks users into manually compiling and executing malware on their systems. The campaign was first identified in December 2025 by researchers at Securonix, who have labeled it as 'PHALT#BLYX.' 11 sources 33

Extracted Entities

New ClickFix Attack Uses Fake Windows BSOD Screens to Trick Users into Executing Malicious Code

The full story

Extracted Entities

Attack Types (2)

Industries (1)

Malware (1)

Platforms (1)