JackFix Uses Fake Windows Update Pop-Ups on Adult Sites to Deliver Multiple Stealers

Cybersecurity researchers have identified a sophisticated phishing campaign that employs fake adult websites, such as cloned versions of xHamster and PornHub, combined with ClickFix lures to trick users into executing malicious commands. The campaign disguises these commands as critical Windows security updates, likely distributed through malvertising on compromised or fake adult sites, increasing its potential reach and effectiveness. This development highlights the evolving tactics used by cybercriminals to exploit user trust and technical vulnerabilities, emphasizing the need for heightened vigilance and improved security measures against such targeted social engineering attacks.