{"id":225900,"date":"2025-11-26T01:24:58","date_gmt":"2025-11-26T07:24:58","guid":{"rendered":"https:\/\/lifeboat.com\/blog\/2025\/11\/jackfix-uses-fake-windows-update-pop-ups-on-adult-sites-to-deliver-multiple-stealers"},"modified":"2025-11-26T01:24:58","modified_gmt":"2025-11-26T07:24:58","slug":"jackfix-uses-fake-windows-update-pop-ups-on-adult-sites-to-deliver-multiple-stealers","status":"publish","type":"post","link":"https:\/\/lifeboat.com\/blog\/2025\/11\/jackfix-uses-fake-windows-update-pop-ups-on-adult-sites-to-deliver-multiple-stealers","title":{"rendered":"JackFix Uses Fake Windows Update Pop-Ups on Adult Sites to Deliver Multiple Stealers"},"content":{"rendered":"<p><a class=\"aligncenter blog-photo\" href=\"https:\/\/lifeboat.com\/blog.images\/jackfix-uses-fake-windows-update-pop-ups-on-adult-sites-to-deliver-multiple-stealers.jpg\"><\/a><\/p>\n<p>\u201cCampaign leverages fake adult websites (xHamster, PornHub clones) as its phishing mechanism, likely distributed via malvertising,\u201d Acronis <a href=\"https:\/\/www.acronis.com\/en\/tru\/posts\/fake-adult-websites-pop-realistic-windows-update-screen-to-deliver-stealers-via-clickfix\/\" rel=\"noopener\" target=\"_blank\">said<\/a> in a new report shared with The Hacker News. \u201cThe adult theme, and possible connection to shady websites, adds to the victim\u2019s psychological pressure to comply with sudden \u2018security update\u2019 installation.\u201d<\/p>\n<p><a href=\"https:\/\/thehackernews.com\/2025\/09\/new-filefix-variant-delivers-stealc.html\" rel=\"noopener\" target=\"_blank\">ClickFix-style attacks<\/a> have surged over the past year, typically tricking users into running malicious commands on their own machines using prompts for technical fixes or completing CAPTCHA verification checks. According to <a href=\"https:\/\/blogs.microsoft.com\/on-the-issues\/2025\/10\/16\/mddr-2025\/\" rel=\"noopener\" target=\"_blank\">data<\/a> from Microsoft, ClickFix has become the most common initial access method, accounting for 47% of attacks.<\/p>\n<p>The latest campaign displays highly convincing fake Windows update screens in an attempt to get the victim to run malicious code, indicating that attackers are moving away from the traditional robot-check lures. The activity has been codenamed <strong>JackFix<\/strong> by the Singapore-based cybersecurity company.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u201cCampaign leverages fake adult websites (xHamster, PornHub clones) as its phishing mechanism, likely distributed via malvertising,\u201d Acronis said in a new report shared with The Hacker News. \u201cThe adult theme, and possible connection to shady websites, adds to the victim\u2019s psychological pressure to comply with sudden \u2018security update\u2019 installation.\u201d ClickFix-style attacks have surged over the [\u2026]<\/p>\n","protected":false},"author":427,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[34,6],"tags":[],"class_list":["post-225900","post","type-post","status-publish","format-standard","hentry","category-cybercrime-malcode","category-robotics-ai"],"_links":{"self":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/225900","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/users\/427"}],"replies":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/comments?post=225900"}],"version-history":[{"count":0,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/225900\/revisions"}],"wp:attachment":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/media?parent=225900"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/categories?post=225900"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/tags?post=225900"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}