![\"Pornhub](\"https:\/\/www.newsbeep.com\/ca\/wp-content\/uploads\/2025\/11\/1764332588_57_0x0.jpg\")
<\/p>\n<\/p>\n
Do not open this website.<\/p>\n
Getty Images<\/p>\n
Updated on Nov. 28 with a new porn-related attack now targeting users.. <\/p>\n
This is wild and new. Attackers have worked out that malicious emails pushing links to adult sites will solicit plenty of clicks. Unfortunately, those clicks trigger a fake update that installs dangerous malware on your device. As tempting as it may be \u2014 do not click.<\/p>\n
The team at Acronis<\/a> warn the \u201cnovel \u2018JackFix\u2019 attacks\u201d combine \u201cscreen hijacking techniques with ClickFix, displaying a realistic, full-screen Windows Update of \u2018Critical Windows Security Updates\u2019 to trick victims into executing malicious commands.\u201d<\/p>\n ForbesStop Using Your VPN\u2014Feds Warn iPhone And Android UsersBy Zak Doffman<\/a><\/p>\n We have seen plenty of seemingly innocuous lures to drive ClickFix<\/a> attacks, most being fake captchas<\/a> and technical support<\/a> pop-ups. But this new campaign \u201cleverages fake adult websites (xHamster, PornHub clones) as its phishing mechanism.\u201d<\/p>\n Acronis says \u201cthe adult theme, and possible connection to shady websites, add to a victim\u2019s psychological pressure, making victims more likely to comply with sudden \u2018security update\u2019 installation instructions.\u201d<\/p>\n Fake porn website.<\/p>\n Acronis<\/p>\n The attack itself hijacks a PC\u2019s entire screen, \u201cdisplaying an authentic looking Windows Update screen \u2014 complete with the appropriate animations, a counting-up percentage of progress and the appearance of going full screen.\u201d<\/p>\n The attack is executed entirely within the PC\u2019s browser, and Acronis says the resulting screen hijacking \u201cis something we haven\u2019t seen done before this campaign, but the principle is well proven and goes back over 15 years.\u201d The adult content<\/a> is the new twist on a theme, enticing users to click before \u201cthe trap is sprung.\u201d<\/p>\n Psychologically, the lure is designed to catch you when you\u2019re on edge, clicking something you know you probably shouldn\u2019t. And so when an urgent security update screen opens, you\u2019re more likely to be tricked into engaging. <\/p>\n Staying safe is easy. Don\u2019t access adult sites from links in emails or messages or pop-ups. As with any other website, access it directly using the usual means.<\/p>\n Fake Windows update screen.<\/p>\n Acronis<\/p>\n It\u2019s not only fake porn sites trying to trick Windows users into clicking where and when they shouldn\u2019t. A new campaign, flagged on X<\/a>, warns that an \u201cinfostealer is being delivered by an in-browser fake Windows Update, abusing the Fullscreen API (on-click), and using ClickFix-style lures to trick users.\u201d<\/p>\n And separately, the team at Huntress<\/a> has flagged a \u201cmulti-stage malware execution chain, originating from a ClickFix lure, that leads to the delivery of infostealing malware, including LummaC2 and Rhadamanthys.\u201d<\/p>\n In this other instance, it\u2019s steganography \u2014 concealing malicious code in images \u2014 rather than more illicit lures that has been deployed. \u201cThe malicious code is encoded directly within the pixel data of PNG images, relying on specific colour channels to reconstruct and decrypt the payload in memory.\u201d<\/p>\n As ever with ClickFix, the campaigns are designed to trick a user into attacking their own devices. Never copy and paste or run code when prompted to do so by an attachment, a link or a pop-up.<\/p>\n While this porn-related malware is very real, the bigger threat to users remains scam emails and messages that seek to scare users into believing their devices have been hacked and their use of adult content recorded in some way.<\/p>\n The emails threaten to share images or videos with family, friends and colleagues, because they have also \u2014 they say \u2014 stolen contact lists. The messages are fake. It\u2019s a lure built on the popularity of adult sites and the likelihood you\u2019ll feel compromised. <\/p>\n The psychology is the same as with the malware attack. You\u2019re viewing or have viewed illicit content, and so you\u2019re more susceptible to a scam. <\/p>\n A new attack this week comes by way of an email that begins: \u201cAbout few weeks ago I have gained a full access to all devices used by you for internet browsing. Shortly after, I started recording all internet activities done by you.\u201d<\/p>\n Do not be alarmed<\/p>\n Scam email<\/p>\n The nasty trick in this campaign is that the sender\u2019s email address will be the same as your own. \u201cAs you can see, I managed to log in to your email account.”<\/p>\n The email goes on to say that \u201cI assure you, because I have spent a lot of effort while recording and tracking down all your activities and dirty deeds during a long period of time. You have only 40 hours and countdown has started once you opened this email.\u201d<\/p>\n