Fresh ClickFix attacks use Windows Update trick-pics to steal credentials

A fresh wave of ClickFix attacks is using fake Windows update screens to trick victims into downloading infostealer malware. ClickFix is a type of social engineering technique that tricks users into running malicious commands on their own machines, typically using fake fixes or I-am-not-a-robot prompts. These types of attacks …

[beast666]

"Huntress doesn’t know who is behind these campaigns but noted the source code of the Windows Update lure site contains comments in Russian."

You can take it to the bank that the miscreants are NOT Russian.

[Long John Silver]

Exactly my take on it. People clever enough to devise and deploy the code would put people off the scent by including seemingly forgotten comments in the language of one of the West's current bêtes noires, e.g. Russia, China, N. Korea, and Iran.

[IGotOut]

Thought you'd been chucked out of a window Puppy666 for not meeting your propaganda targets.

Welcome back comrade.

[Casca]

We should take your word for it? LMAO