The ClickFix campaign disguises malware as legitimate Windows updates, using steganography to hide shellcode in PNG files and bypass security detection systems.

Don't miss out on our latest stories. Add PCMag as a preferred source on Google. A new attack is mimicking a Windows update to try and trick users into executing malicious commands, likely to install ...

December 4, 2025 Add as a preferred source on Google Add as a preferred source on Google The update screen is a normal occurrence on Windows machines, so of course hackers are now manipulating it to ...

The fake update screen then instructs the user to press “CTRL + V”—the paste function—and then press enter. If a victim falls for the trick, they’ll unknowingly run a command, causing their Windows PC ...