Windows users are being warned about a new scam targeting them with fake software updates. Cybercriminals are directing users to malicious websites that mimic official Microsoft pages, prompting them to download what appears to be a legitimate Windows update. However, the file actually contains dangerous malware aimed at stealing sensitive information such as passwords and payment details.
Security researchers at Malwarebytes have identified this scam, which utilizes fake websites designed to resemble Microsoft Support and Windows Update pages. These fraudulent sites mimic Microsoft’s design elements and use convincing web addresses to deceive users.
To avoid falling victim to this scam, users are advised not to click on any suspicious update links received through emails, texts, or social media. Instead, they should manually check for updates by accessing the Windows Update feature in the Settings menu.
The downloaded malware file is made to look authentic, making it challenging for users and some security software to detect its malicious nature. Although the current targets seem to be primarily in France, experts caution that these attacks could rapidly spread to other regions. Therefore, all Windows users should exercise caution and avoid downloading any suspicious updates.
For enhanced protection, users should only trust updates delivered through the official Windows update system and refrain from downloading updates from external sources. Enabling automatic updates is also recommended by security experts to minimize the risk of falling for fake update scams.
Specifically, Windows 11 users should be extra vigilant against unexpected messages urging immediate updates, as installing software only from official Microsoft channels is the most effective defense strategy.