A new fraudulent scheme has been discovered targeting Microsoft Windows users with deceptive software updates. Cybercriminals are luring users to fake websites resembling official Microsoft pages, prompting them to download what appears to be a legitimate Windows update. However, the downloaded file contains harmful malware aimed at stealing sensitive information like passwords and financial details.
According to cybersecurity experts at Malwarebytes, the scam involves websites designed to mimic Microsoft Support and Windows Update, using Microsoft’s fonts, colors, and design to appear authentic. Users are advised not to click on any suspicious links urging them to install urgent updates but instead to verify updates through the Windows Update section in Settings.
The malicious file looks convincing enough to bypass detection by users and some security software, making it even more dangerous. While the current targets seem to be primarily in France, experts caution that these attacks can quickly spread, urging all Windows users to exercise caution before downloading any updates.
To stay safe, users should avoid trusting update links sent via email, text, or social media. The recommended method for installing updates is through Windows’ built-in update system by checking for updates in Settings. Users should be wary of any website offering a separate Windows update download and enable automatic updates to reduce the risk of falling victim to fake update scams.
Windows 11 users are specifically warned to be cautious of unexpected messages prompting urgent updates, emphasizing that installing software only through official Microsoft channels is the most effective defense against such malicious attacks.