New ClickFix Attack Tricks Users with \u2018Fake OS Update\u2019 to Execute Malicious Commands
\n \t
\n
<\/BR>
\n
\n \t
\n
<\/BR><\/p>\n
A new ClickFix campaign is tricking users with a fake Windows update that runs in their browser. Called \u201cFake OS Update,\u201d this scam takes advantage of people\u2019s trust in the familiar blue screen of death (BSOD)<\/a> from Microsoft.<\/p>\n It delivers malware and shows how social engineering can be more effective than technical tricks.<\/p>\n Cybersecurity researcher Daniel B., who works at the UK\u2019s National Health Service, first spotted the attack last month while probing malicious online threats.<\/p>\n As detailed in his LinkedIn post, the scam operates primarily on the domain groupewadesecurity[.]com. Simply visiting the site often via malvertising or spam links triggers a full-screen overlay mimicking a Windows OS crash or update prompt.<\/p>\n The fake BSOD, complete with error codes and progress bars, appears on both PCs and smartphones, creating panic and urgency.<\/p>\n