Story perspectives

JackFix Phishing Campaign: Malware Disguised as Windows Updates

11/27/2025

Summary

Story summary

The phishing campaign codenamed JackFix lures victims to fake adult sites and instructs them to paste commands into the Windows Command Prompt, disguising malware as Windows updates.
Full-screen update prompts bypass security and enable malware execution.
Malware uses steganography to hide code in PNG images decrypted by .NET loader.
It can steal passwords and cryptocurrency wallets, and experts urge disabling Windows Run dialog and training users to recognize suspicious prompts.

1 of 1

Story summary

The phishing campaign codenamed JackFix lures victims to fake adult sites and instructs them to paste commands into the Windows Command Prompt, disguising malware as Windows updates.
Full-screen update prompts bypass security and enable malware execution.
Malware uses steganography to hide code in PNG images decrypted by .NET loader.
It can steal passwords and cryptocurrency wallets, and experts urge disabling Windows Run dialog and training users to recognize suspicious prompts.