Cyber scammers are currently targeting Microsoft Windows users with a deceptive scheme involving fake software updates. These malicious actors are luring victims to counterfeit websites resembling official Microsoft pages, where they are prompted to download what appears to be a legitimate Windows update. However, the downloaded file actually contains harmful malware designed to steal sensitive information such as passwords, payment details, and account credentials.
According to cybersecurity researchers at Malwarebytes, the scam employs websites that mimic Microsoft Support and Windows Update pages. To enhance the deception, these fraudulent sites replicate Microsoft’s fonts, colors, design, and utilize web addresses that closely resemble authentic Microsoft URLs, making it challenging for users to distinguish them as fake.
To avoid falling victim to this scam, Malwarebytes advises users not to click on any links in emails, texts, or notifications urging them to install urgent updates. Instead, they should directly navigate to Settings > Windows Update to verify the legitimacy of any pending updates.
Furthermore, the downloaded malware file convincingly masquerades as a genuine update, making it difficult for users and some security software to detect its malicious nature. While the scam currently seems to target users in France, experts caution that it could quickly spread to other regions. Therefore, all Windows users must exercise caution and refrain from downloading suspicious updates.
To safeguard against such threats, users should never trust update links sent via email, text messages, or social media. The safest method to install updates is through the native Windows update system. By accessing Start, proceeding to Settings > Windows Update, and selecting “Check for updates,” users can ensure they are installing authentic updates.
Users should be wary of any website offering a separate Windows update download and are strongly encouraged to enable automatic updates to minimize the risk of falling prey to fraudulent update scams. Specifically, Windows 11 users should exercise extra vigilance against unexpected messages demanding urgent updates and strictly adhere to installing software exclusively through official Microsoft channels to mitigate the risk of cyberattacks.