New ClickFix Malware Campaign Targets Windows Users with Fake Updates

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

ClickFix Malware Campaign Uses Fake Windows Updates to Deploy Infostealers A new wave of ClickFix attacks is utilizing fake Windows Update screens to deceive users into executing malicious commands that install infostealing malware. These attacks employ steganography to hide malware within PNG images, making them harder to detect. Organizations across the U.S., EMEA, and Asia-Pacific regions have been targeted since late September 2025. 24 sources 23