A new scam targeting Microsoft Windows users has surfaced, urging caution when interacting with emails and download links. Cybercriminals are leading users to fake websites closely resembling official Microsoft pages, prompting them to download what appears to be a legitimate Windows update. However, the file actually contains malicious software aimed at stealing sensitive information such as passwords and payment details.
According to cybersecurity researchers at Malwarebytes, the scam utilizes websites designed to mimic Microsoft Support and Windows Update, replicating Microsoft’s branding elements to deceive users effectively. To avoid falling victim to this scam, users are advised to refrain from clicking on suspicious update links and instead manually check for updates through the Windows Update feature in the Settings menu.
The deceptive nature of the downloaded file, which convincingly mimics authentic updates, contributes to its ability to evade detection by users and some security tools. While the current targets seem concentrated in France, experts caution that the scam could rapidly spread to other regions, emphasizing the importance of vigilance among all Windows users before downloading any updates.
To safeguard against such scams, users are urged to exercise caution with update links received via email, text messages, or social media. The most secure method for installing updates is through the Windows built-in update system by navigating to Settings and selecting the “Check for updates” option.
Users should be wary of any website offering Windows updates as a separate download and are encouraged to enable automatic updates to minimize the risk of falling prey to fake update schemes. Particularly for Windows 11 users, extra vigilance is advised when encountering unexpected messages urging immediate updates, with the safest approach being to install software exclusively through official Microsoft channels.