Windows users are being targeted by a new scam involving fake software updates, cybersecurity experts warn. Attackers are directing users to deceptive websites imitating official Microsoft pages, prompting them to download what appears to be a legitimate Windows update. However, the file actually contains dangerous malware aimed at stealing sensitive information such as passwords and payment details.
According to cybersecurity researchers at Malwarebytes, the scam employs websites designed to mimic Microsoft Support and Windows Update, using similar fonts, colors, and designs to deceive users. To avoid falling victim to this scam, users are advised not to click on any suspicious update links and instead check for updates directly through the Windows Update settings.
The downloaded file looks authentic, making it harder for users and some security software to detect the malicious intent. While the current targets seem to be primarily in France, experts caution that the scam could quickly spread, urging all Windows users to exercise caution and refrain from downloading suspicious files.
To safeguard against such threats, users are encouraged to avoid update links from emails, texts, or social media and rely on Windows’ built-in update system for installing updates securely. Any website offering a separate Windows update download should be treated with suspicion. Enabling automatic updates and obtaining software exclusively through official Microsoft channels are recommended practices to reduce the risk of falling for fake update scams, particularly for Windows 11 users.
