ClickFix Malware Campaign Uses Fake Windows Updates to Deploy Infostealers

ClickFix Malware Campaign Uses Fake Windows Updates to Deploy Infostealers

First seen 2 Dec 2025, 18:33 UTC •BleepingcomputerCybersecuritynewsEsecurityplanetUk.PcmagHuntress+13 •74% similarity •23.4

Article Content

Browse articles
ThreatCluster

A new wave of ClickFix attacks is utilizing fake Windows Update screens to deceive users into executing malicious commands that install infostealing malware. These attacks employ steganography to hide malware within PNG images, making them harder to detect. Organizations across the U.S., EMEA, and Asia-Pacific regions have been targeted since late September 2025.

ThreatCluster AI How this analysis works

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

Cephalus ClickFix Landfall Flexible Ferret Herodotus InvisibleFerret LummaC2 ClickFix Attack ClickFix Attack Campaign ClickFix campaign ClickFix Malware Campaign ClickFix Wave Contagious Interview Cisco SitusAMC Cloudflare Google Linux