Windows users are being warned about a new scam targeting them with fake software updates. Cyber attackers are luring users to deceptive websites resembling official Microsoft pages, prompting them to download what appears to be a legitimate Windows update. However, the file actually contains malicious software aimed at stealing sensitive information like passwords and payment details.
Security experts at Malwarebytes have identified the scam, which utilizes fake Microsoft Support and Windows Update websites designed to mimic the appearance of genuine Microsoft pages. The websites copy Microsoft’s fonts, colors, and design to deceive users effectively.
To avoid falling victim to this scam, users are advised not to click on any links in emails, texts, or notifications urging them to install urgent updates. Instead, they should manually check for updates through the Windows Update feature in their system settings.
The downloaded file appears authentic, making it challenging for users and some security software to detect the malware. While the current targets seem to be primarily in France, experts caution that these scams can quickly spread, necessitating vigilance among all Windows users before downloading any suspicious updates.
To stay safe, users should always be cautious of update links received via email, text, or social media. The safest method to install updates is through the Windows built-in update system by navigating to Settings > Windows Update and selecting “Check for updates.”
Users are advised to treat any website offering a Windows update as a separate download with suspicion. Enabling automatic updates is recommended by security experts as it reduces the risk of falling prey to fake update scams by minimizing the need to manually install files.
Windows 11 users are specifically urged to be cautious of unexpected messages requiring urgent updates on their devices. Installing software exclusively through official Microsoft channels is emphasized as the most effective defense against these fraudulent attacks.