A new fraudulent scheme targeting Microsoft Windows users has been identified, urging caution when dealing with emails and download links. Cybercriminals are leading users to deceptive websites resembling official Microsoft pages, prompting them to download what appears to be a legitimate Windows update. However, the file actually contains harmful malware aimed at stealing sensitive information like passwords and payment details.
According to cybersecurity experts at Malwarebytes, the scam involves fake Microsoft Support and Windows Update websites that mimic the official Microsoft design and features. The deceptive nature of these sites, including similar fonts, colors, and web addresses, makes them convincing to unsuspecting users.
To avoid falling victim to such scams, Malwarebytes advises users not to click on urgent update links received via email, text, or notifications. Instead, they should manually check for updates through the Windows Update feature in Settings to ensure authenticity.
The malicious file is designed to appear authentic, making it challenging for users and some security software to detect its harmful nature. While the current targets seem to be primarily in France, experts warn that these fraudulent campaigns can quickly spread, emphasizing the importance of vigilance for all Windows users before downloading any updates.
To safeguard against such threats, users are urged to distrust update links from unverified sources like emails, texts, or social media. The most secure method for updating is through the Windows built-in update system by navigating to Settings, selecting Windows Update, and clicking on “Check for updates.”
Any site offering a separate Windows update download should be treated with suspicion, and enabling automatic updates is recommended to reduce the risk of falling prey to fake update scams. Windows 11 users, in particular, are advised to exercise caution against unexpected update messages and rely solely on official Microsoft channels for software installations to enhance their defense against potential attacks.