A new scam targeting users of Microsoft’s Windows operating system has been identified, urging caution when interacting with emails or download links. Cybercriminals are leading Windows users to deceptive websites that mimic official Microsoft pages, prompting them to download what appears to be a legitimate Windows update. However, the file actually harbors malicious software aimed at stealing sensitive information like passwords and payment details.
Security researchers at Malwarebytes have uncovered that the scam employs fake websites resembling Microsoft Support and Windows Update, replicating Microsoft’s branding elements to deceive unsuspecting users. These fraudulent pages are designed to look authentic, making it challenging for users and some security software to detect the scam.
To avoid falling victim to such scams, Malwarebytes advises users not to click on links in suspicious emails, texts, or notifications prompting urgent updates. Instead, they recommend checking for updates directly through the Windows Update section in Settings. Furthermore, users are cautioned against downloading separate Windows updates from unfamiliar websites and are encouraged to enable automatic updates as an added security measure.
While the current targets seem to be primarily in France, experts stress the potential for these scams to spread quickly, underscoring the importance of vigilance among all Windows users. Particularly, Windows 11 users are urged to exercise caution against unexpected messages requesting urgent updates and are reminded to only install software through official Microsoft channels for heightened protection.