Mastodawn

ClickFix attacks now use fake Windows BSOD screens to push malware — when even system crashes are forged, trust is the real casualty. Stay skeptical. 💻⚠️ #MalwareTactics #SocialEngineering

https://www.bleepingcomputer.com/news/security/clickfix-attack-uses-fake-windows-bsod-screens-to-push-malware/

ClickFix attack uses fake Windows BSOD screens to push malware

A new ClickFix social engineering campaign is targeting the hospitality sector in Europe, using fake Windows Blue Screen of Death (BSOD) screens to trick users into manually compiling and executing malware on their systems.

BleepingComputer

Manuel Bissey Dec 1

JackFix malware uses fake Windows update pop-ups to trick users into installing payloads — familiar screens are becoming the perfect disguise. Stay skeptical. 💻⚠️ #MalwareTactics #SocialEngineering

https://thehackernews.com/2025/11/jackfix-uses-fake-windows-update-pop.html

JackFix Uses Fake Windows Update Pop-Ups on Adult Sites to Deliver Multiple Stealers

Fake Windows update lures using ClickFix deliver multi-stage PowerShell malware via adult-site malvertising.

The Hacker News

Manuel Bissey Nov 26

⚠️ A new ClickFix attack uses fake Windows update screens to deliver malware — proving that the most dangerous prompts look familiar. Don’t trust every dialog box. 💻☣️ #MalwareTactics #SocialEngineering

https://www.bleepingcomputer.com/news/security/clickfix-attack-uses-fake-windows-update-screen-to-push-malware/

ClickFix attack uses fake Windows Update screen to push malware

New ClickFix attack variants have been observed where threat actors trick users with a realistic-looking Windows Update animation in a full-screen browser page and hide the malicious code inside images.

BleepingComputer

Manuel Bissey Nov 3

New living-off-the-land attacks exploit Windows’ native AI stack — turning built-in intelligence into an insider threat. 🧠💻 #MalwareTactics #AIThreats

https://www.darkreading.com/vulnerabilities-threats/lotl-attack-malware-windows-native-ai-stack

The DefendOps Diaries Oct 21

A routine "I'm not a robot" check turned into a masterstroke for cyber-espionage. See how Star Blizzard's NoRobot and MaybeRobot malware transformed simple clicks into high-stakes intelligence operations.

https://thedefendopsdiaries.com/the-rise-of-norobot-and-mayberobot-how-star-blizzard-redefined-malware-tactics/

#starblizzard
#norobot
#mayberobot
#malwaretactics
#cyberespionage

Manuel Bissey Jun 26, 2025

🖥️ Hackers are abusing ScreenConnect with Authenticode stuffing to turn it into stealthy malware. A stark reminder: trusted tools can be weaponized.
#MalwareTactics #ToolAbuse 🧬⚠️

https://www.bleepingcomputer.com/news/security/hackers-turn-screenconnect-into-malware-using-authenticode-stuffing/

Hackers turn ScreenConnect into malware using Authenticode stuffing

Threat actors are abusing the ConnectWise ScreenConnect installer to build signed remote access malware by modifying hidden settings within the client's Authenticode signature.

BleepingComputer