A concerning new scam targeting Windows users has been discovered involving fake software updates. Cybercriminals are luring unsuspecting victims to fraudulent websites resembling official Microsoft pages. Users are then prompted to download what appears to be a legitimate Windows update, but in reality, it contains harmful malware aimed at stealing sensitive information like passwords and payment details.
Security researchers from Malwarebytes have identified this scam using fake Microsoft Support and Windows Update websites that closely mimic authentic Microsoft pages, including fonts, colors, and design elements. To avoid falling victim to this scam, users are advised to refrain from clicking on suspicious links in emails, texts, or notifications and instead manually check for updates in the Windows Update settings.
The malicious file being distributed appears authentic, making it difficult for users and some security software to detect the threat. While the current targets seem to be primarily in France, experts caution that these scams can quickly spread, urging all Windows users to exercise caution and refrain from downloading suspicious updates.
To safeguard against such threats, users should never trust update links from unverified sources like email, text messages, or social media. The safest method to update Windows is through the system’s built-in update feature. Additionally, users are encouraged to enable automatic updates to reduce the risk of falling prey to fake update scams by downloading updates only from official Microsoft channels.
Users of Windows 11 are specifically warned to be cautious of unexpected messages claiming urgent device updates. Installing software exclusively through legitimate Microsoft platforms remains the most effective defense against these malicious attacks.