Windows users are being targeted by a new scam involving fake software updates, cybersecurity experts warn. Attackers are luring users to deceptive websites resembling official Microsoft pages, urging them to download what appears to be a legitimate Windows update. However, the file actually contains dangerous malware designed to steal sensitive information such as passwords and payment details.
Malwarebytes researchers have identified this scam, which utilizes fake Microsoft Support and Windows Update websites that mimic the design and style of legitimate Microsoft pages. The convincing appearance of these sites, including fonts, colors, and web addresses, makes it challenging for users to distinguish them from authentic sources.
To avoid falling victim to this scam, users are advised not to click on any links in emails, texts, or notifications prompting urgent updates. Instead, they should directly check for updates through the Windows Update section in Settings. The malicious file appears authentic, making it difficult for users and some security software to detect its harmful nature.
Although the current targets seem to be primarily in France, experts caution that these fraudulent campaigns can quickly spread to other regions. Therefore, all Windows users are urged to exercise caution and refrain from downloading suspicious updates.
For enhanced security, users should never trust update links received through email, text messages, or social media. The safest method to install updates is through the official Windows update system by navigating to Settings > Windows Update and selecting “Check for updates.”
Users should treat any website offering a standalone Windows update download with suspicion. Enabling automatic updates is recommended by security experts as it reduces the risk of falling prey to fake update scams by minimizing the need for manual installations.
Windows 11 users, in particular, are advised to be cautious of unexpected messages demanding urgent updates. Installing software exclusively through official Microsoft channels is emphasized as the most effective defense against these malicious attacks.