{"id":311441,"date":"2025-11-28T02:16:09","date_gmt":"2025-11-28T02:16:09","guid":{"rendered":"https:\/\/www.newsbeep.com\/ca\/311441\/"},"modified":"2025-11-28T02:16:09","modified_gmt":"2025-11-28T02:16:09","slug":"do-not-click-this-porn-site-installs-malware-on-your-device","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/ca\/311441\/","title":{"rendered":"Do Not Click\u2014This Porn Site Installs Malware On Your Device"},"content":{"rendered":"<p><img decoding=\"async\" class=\" top-image\" src=\"https:\/\/www.newsbeep.com\/ca\/wp-content\/uploads\/2025\/11\/1764296169_874_0x0.jpg\" alt=\"Pornhub logo\" data-height=\"1781\" data-width=\"2672\" fetchpriority=\"high\" style=\"position:absolute;top:0\"\/><\/p>\n<p>Do not open this website.<\/p>\n<p>Getty Images<\/p>\n<p>Updated on Nov. 27 with further Windows update warnings issued for users. <\/p>\n<p>This is wild and new. Attackers have worked out that malicious emails pushing links to adult sites will solicit plenty of clicks. Unfortunately, those clicks trigger a fake update that installs dangerous malware on your device. As tempting as it may be \u2014 do not click.<\/p>\n<p><a class=\"embed-base color-body color-body-border link-embed embed-7\" href=\"https:\/\/www.forbes.com\/sites\/zakdoffman\/2025\/11\/27\/stop-using-your-vpn-feds-warn-iphone-and-android-users\/\" target=\"_blank\" aria-label=\"Stop Using Your VPN\u2014Feds Warn iPhone And Android Users\" data-ga-track=\"forbesEmbedly:https:\/\/www.forbes.com\/sites\/zakdoffman\/2025\/11\/27\/stop-using-your-vpn-feds-warn-iphone-and-android-users\/\" rel=\"nofollow noopener\">ForbesStop Using Your VPN\u2014Feds Warn iPhone And Android UsersBy Zak Doffman<\/a><\/p>\n<p>The team at <a class=\"color-link\" href=\"https:\/\/www.acronis.com\/en\/tru\/posts\/fake-adult-websites-pop-realistic-windows-update-screen-to-deliver-stealers-via-clickfix\/\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" data-ga-track=\"ExternalLink:https:\/\/www.acronis.com\/en\/tru\/posts\/fake-adult-websites-pop-realistic-windows-update-screen-to-deliver-stealers-via-clickfix\/\" aria-label=\"Acronis\">Acronis<\/a> warn the \u201cnovel \u2018JackFix\u2019 attacks\u201d combine \u201cscreen hijacking techniques with ClickFix, displaying a realistic, full-screen Windows Update of \u2018Critical Windows Security Updates\u2019 to trick victims into executing malicious commands.\u201d<\/p>\n<p>We have seen plenty of seemingly innocuous lures to drive <a class=\"color-link\" href=\"https:\/\/www.forbes.com\/sites\/zakdoffman\/2025\/04\/21\/do-not-click-if-you-see-this-on-your-pc-its-an-attack\/\" data-ga-track=\"InternalLink:https:\/\/www.forbes.com\/sites\/zakdoffman\/2025\/04\/21\/do-not-click-if-you-see-this-on-your-pc-its-an-attack\/\" target=\"_self\" aria-label=\"ClickFix\" rel=\"nofollow noopener\">ClickFix<\/a> attacks, most being fake <a class=\"color-link\" href=\"https:\/\/www.forbes.com\/sites\/zakdoffman\/2024\/09\/21\/microsoft-windows-10-windows-11-warning-for-millions-of-pc-users\/\" data-ga-track=\"InternalLink:https:\/\/www.forbes.com\/sites\/zakdoffman\/2024\/09\/21\/microsoft-windows-10-windows-11-warning-for-millions-of-pc-users\/\" target=\"_self\" aria-label=\"captchas\" rel=\"nofollow noopener\">captchas<\/a> and <a class=\"color-link\" href=\"https:\/\/www.forbes.com\/sites\/zakdoffman\/2025\/08\/23\/microsoft-warns-all-windows-users-this-message-is-an-attack\/\" data-ga-track=\"InternalLink:https:\/\/www.forbes.com\/sites\/zakdoffman\/2025\/08\/23\/microsoft-warns-all-windows-users-this-message-is-an-attack\/\" target=\"_self\" aria-label=\"technical support\" rel=\"nofollow noopener\">technical support<\/a> pop-ups. But this new campaign \u201cleverages fake adult websites (xHamster, PornHub clones) as its phishing mechanism.\u201d<\/p>\n<p>Fake porn website.<\/p>\n<p>Acronis<\/p>\n<p>Acronis says \u201cthe adult theme, and possible connection to shady websites, add to a victim\u2019s psychological pressure, making victims more likely to comply with sudden \u2018security update\u2019 installation instructions.\u201d<\/p>\n<p>The attack itself hijacks a PC\u2019s entire screen, \u201cdisplaying an authentic looking Windows Update screen \u2014 complete with the appropriate animations, a counting-up percentage of progress and the appearance of going full screen.\u201d<\/p>\n<p>Fake Windows update screen.<\/p>\n<p>Acronis<\/p>\n<p>The attack is executed entirely within the PC\u2019s browser, and Acronis says the resulting screen hijacking \u201cis something we haven\u2019t seen done before this campaign, but the principle is well proven and goes back over 15 years.\u201d The <a class=\"color-link\" href=\"https:\/\/www.forbes.com\/sites\/zakdoffman\/2025\/11\/24\/porn-ban-googles-invisible-tracking-is-already-on-your-phone\/\" data-ga-track=\"InternalLink:https:\/\/www.forbes.com\/sites\/zakdoffman\/2025\/11\/24\/porn-ban-googles-invisible-tracking-is-already-on-your-phone\/\" target=\"_self\" aria-label=\"adult content\" rel=\"nofollow noopener\">adult content<\/a> is the new twist on a theme, enticing users to click before \u201cthe trap is sprung.\u201d<\/p>\n<p>Psychologically, the lure is designed to catch you when you\u2019re on edge, clicking something you know you probably shouldn\u2019t. And so when an urgent security update screen opens, you\u2019re more likely to be tricked into engaging. <\/p>\n<p>Staying safe is easy. Don\u2019t access adult sites from links in emails or messages or pop-ups. As with any other website, access it directly using the usual means.<\/p>\n<p>It\u2019s not only fake porn sites trying to trick Windows users into clicking where and when they shouldn\u2019t. A new campaign, <a class=\"color-link\" href=\"https:\/\/x.com\/joe4security\/status\/1979084146010886358?s=61&amp;t=hwS5xcISslT5UvqlKf-9Wg\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" data-ga-track=\"ExternalLink:https:\/\/x.com\/joe4security\/status\/1979084146010886358?s=61&amp;t=hwS5xcISslT5UvqlKf-9Wg\" aria-label=\"flagged on X\">flagged on X<\/a>, warns that an \u201cinfostealer is being delivered by an in-browser fake Windows Update, abusing the Fullscreen API (on-click), and using ClickFix-style lures to trick users.\u201d<\/p>\n<p>And separately, the team at <a class=\"color-link\" href=\"https:\/\/www.huntress.com\/blog\/clickfix-malware-buried-in-images\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" data-ga-track=\"ExternalLink:https:\/\/www.huntress.com\/blog\/clickfix-malware-buried-in-images\" aria-label=\"Huntress\">Huntress<\/a> has flagged a \u201cmulti-stage malware execution chain, originating from a ClickFix lure, that leads to the delivery of infostealing malware, including LummaC2 and Rhadamanthys.\u201d<\/p>\n<p>In this other instance, it\u2019s steganography \u2014 concealing malicious code in images \u2014 rather than more illicit lures that has been deployed. \u201cThe malicious code is encoded directly within the pixel data of PNG images, relying on specific colour channels to reconstruct and decrypt the payload in memory.\u201d<\/p>\n<p><a class=\"embed-base color-body color-body-border link-embed embed-8\" href=\"https:\/\/www.forbes.com\/sites\/zakdoffman\/2025\/11\/27\/microsoft-update-warning-1-billion-windows-users-must-now-act\/\" target=\"_blank\" aria-label=\"Microsoft Update Warning\u20141 Billion Windows Users Must Now Act\" data-ga-track=\"forbesEmbedly:https:\/\/www.forbes.com\/sites\/zakdoffman\/2025\/11\/27\/microsoft-update-warning-1-billion-windows-users-must-now-act\/\" rel=\"nofollow noopener\">ForbesMicrosoft Update Warning\u20141 Billion Windows Users Must Now ActBy Zak Doffman<\/a><\/p>\n<p>As ever with ClickFix, the campaigns are designed to trick a user into attacking their own devices. Never copy and paste or run code when prompted to do so by an attachment, a link or a pop-up.<\/p>\n","protected":false},"excerpt":{"rendered":"Do not open this website. Getty Images Updated on Nov. 27 with further Windows update warnings issued for&hellip;\n","protected":false},"author":2,"featured_media":311442,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[49,48,139074,47145,139072,134806,139073,139071,61],"class_list":["post-311441","post","type-post","status-publish","format-standard","has-post-thumbnail","category-technology","tag-ca","tag-canada","tag-clickfix","tag-pc-attack","tag-porn-age","tag-porn-ban","tag-porn-website","tag-pornhub","tag-technology"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/posts\/311441","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/comments?post=311441"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/posts\/311441\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/media\/311442"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/media?parent=311441"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/categories?post=311441"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/tags?post=311441"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}