Windows users are being targeted by a new scam involving fake software updates that aim to steal sensitive information. Cybercriminals are directing users to deceptive websites resembling Microsoft pages where they are prompted to download what appears to be a legitimate Windows update. However, the file actually contains malicious software designed to steal passwords, payment details, and other personal information.
Security experts at Malwarebytes have identified this scam, which utilizes websites mimicking Microsoft Support and Windows Update. These fraudulent pages replicate Microsoft’s fonts, colors, and design to deceive unsuspecting users. Malwarebytes advises users not to click on any links in emails or messages urging them to install urgent updates but to verify updates directly through the Windows Update section in Settings.
To make matters worse, the downloaded file seems genuine, making it difficult for users and some security software to detect the threat. While the scam initially targets users in France, experts caution that it could quickly spread to other regions, underscoring the importance of remaining cautious and avoiding suspicious downloads.
To safeguard against such scams, users should refrain from trusting update links sent via email, text messages, or social media. It is recommended to install updates through Windows’ built-in update system by navigating to Settings > Windows Update and selecting “Check for updates.” Users should also treat any website offering a Windows update download with skepticism and consider enabling automatic updates to reduce the risk of falling victim to fake update scams.
Windows 11 users are specifically advised to exercise caution when receiving unexpected messages prompting urgent updates. Installing software only through official Microsoft channels is the most effective defense against these malicious attacks.
