A new scam has been discovered targeting Microsoft Windows users through fake software updates. Cybercriminals are luring users to deceptive websites resembling official Microsoft pages, prompting them to download what appears to be a legitimate Windows update. However, the file actually contains harmful malware designed to steal sensitive information like passwords and payment details.
According to cybersecurity researchers at Malwarebytes, the scam involves fake websites that mimic Microsoft Support and Windows Update pages. These fraudulent sites replicate Microsoft’s fonts, colors, design, and utilize convincing web addresses to deceive unsuspecting users. To avoid falling victim to this scam, it is advised not to click on any urgent update links in emails, texts, or notifications, but instead, verify updates directly through the Windows Update section in Settings.
The downloaded file appears authentic, making it harder for users and security software to detect the malicious intent. While the current targets seem to be primarily in France, experts caution that such campaigns can rapidly spread, emphasizing the importance of vigilance among all Windows users worldwide.
To safeguard against such threats, users should never trust update links received via email, text messages, or social media. The safest method to install updates is through the built-in Windows Update system by going to Settings > Windows Update and selecting “Check for updates.” Users are advised to treat any website offering a separate Windows update download with suspicion and enable automatic updates to minimize the risk of falling prey to fake update scams.
In particular, Windows 11 users should exercise caution when encountering unexpected messages urging immediate updates. It is strongly recommended to only install software from official Microsoft sources as the most effective defense against these fraudulent attacks.