A new fraudulent scheme is targeting users of Microsoft’s Windows operating system by luring them with fake software updates. Cybercriminals are leading Windows users to deceptive websites that mimic official Microsoft pages, tricking them into downloading what appears to be a legitimate Windows update. However, the downloaded file contains harmful malware aimed at stealing sensitive information like passwords, payment details, and account credentials.
According to cybersecurity experts at Malwarebytes, the scam employs websites designed to replicate Microsoft Support and Windows Update pages with similar fonts, colors, and layouts to deceive unsuspecting users. To avoid falling victim to this scam, users are advised not to click on any suspicious links urging them to install urgent updates but instead to verify updates directly through the Windows Update section in the Settings.
The downloaded file is crafted to appear authentic, making it difficult for users and some security software to detect its malicious nature. While the current targets seem to be mainly in France, experts caution that these fraudulent activities can quickly spread across all Windows users, urging everyone to exercise caution and refrain from downloading suspicious files.
To safeguard against such threats, users are strongly advised to never trust update links received via email, text messages, or social media. The most secure method to install updates is through the official Windows Update system by going to Settings > Windows Update and selecting “Check for updates.”
It is crucial for users to be wary of any website offering a Windows update as a separate download and to enable automatic updates to minimize the risk of falling for fake update scams. Windows 11 users are specifically reminded to be cautious of unexpected messages prompting urgent updates and to only install software from verified Microsoft sources as the primary defense against such cyberattacks.