Don't miss out on our latest stories. Add PCMag as a preferred source on Google. A new attack is mimicking a Windows update to try and trick users into executing malicious commands, likely to install ...

ClickFix attack variants have been observed where threat actors trick users with a realistic-looking Windows Update animation in a full-screen browser page and hide the malicious code inside images.

The fake update screen then instructs the user to press “CTRL + V”—the paste function—and then press enter. If a victim falls for the trick, they’ll unknowingly run a command, causing their Windows PC ...