Windows users are being targeted by a new scam involving fake software updates, cybersecurity experts have warned. Attackers are luring users to counterfeit websites resembling official Microsoft pages, prompting them to download what appears to be a legitimate Windows update. However, the file actually contains malicious software aimed at stealing sensitive information like passwords and payment details.
According to cybersecurity researchers at Malwarebytes, the scam utilizes fake Microsoft Support and Windows Update pages that mimic the design and appearance of genuine Microsoft sites, making them convincing to unsuspecting users. To avoid falling victim to this scam, users are advised not to click on any urgent update links in emails or messages but instead to manually check for updates through the Windows Update feature in the Settings menu.
The deceptive nature of the downloaded files makes it difficult for users and some security software to detect the malware. While the current targets seem to be mainly in France, experts caution that the scam could quickly spread to other regions. Therefore, all Windows users are urged to exercise caution and refrain from downloading updates from suspicious sources.
To safeguard against such threats, users are reminded to only install updates through the official Windows Update system and to be wary of update links received via email, text messages, or social media. Enabling automatic updates and avoiding separate download offers for Windows updates are additional security measures recommended by experts. For Windows 11 users, extra vigilance is advised when faced with unexpected update requests, emphasizing the importance of obtaining software exclusively from trusted Microsoft channels.