Fake Windows update pushes malware in new ClickFix attack

The ClickFix campaign disguises malware as legitimate Windows updates, using steganography to hide shellcode in PNG files and bypass security detection systems.
Bleeping Computer

WINDOWS UPDATE.EXE Information

This is an undesirable program. This file has been identified as a program that is undesirable to have running on your computer. This consists of programs that are misleading, harmful, or undesirable.

Notepad++ Fixes Major Update Flaw That Let Attackers Push Malware

Notepad++, one of the most widely used text editors on Windows, has rolled out version 8.8.9 to patch a serious security flaw ...
WeLiveSecurity

Evasive Panda APT group delivers malware via updates for popular Chinese software

ESET researchers have discovered a campaign that we attribute to the APT group known as Evasive Panda, where update channels of legitimate applications were mysteriously hijacked to deliver the ...