Users of Microsoft’s Windows operating system are being warned about a new scam that targets them with fake software updates. Cybercriminals are luring Windows users to counterfeit websites that mimic official Microsoft pages, prompting them to download what appears to be a legitimate Windows update. However, this file actually contains malicious software designed to steal sensitive information such as passwords and payment details.
Security researchers at Malwarebytes have identified that the scam involves fake websites resembling Microsoft Support and Windows Update. These websites are carefully crafted to replicate Microsoft’s branding, including fonts, colors, design, and deceptive web addresses to deceive unsuspecting users.
To avoid falling victim to this scam, Malwarebytes advises users not to click on any suspicious links in emails, texts, or notifications urging them to install urgent updates. Instead, users should manually check for updates by going to Settings > Windows Update.
The deceptive nature of the downloaded file makes it difficult for users and some security software to detect its malicious intent. While the scam is currently targeting users in France, experts caution that it could quickly spread to other regions. All Windows users are urged to exercise caution and refrain from downloading software from untrustworthy sources.
To stay safe from such threats, users are advised to only install updates through Windows’ official update system. Enabling automatic updates can also reduce the risk of falling prey to fake update scams by minimizing the need for manual installations.
In particular, Windows 11 users are reminded to be extra vigilant against unexpected messages claiming urgent updates. It is essential to only download software from verified Microsoft channels to shield against these fraudulent activities.