A new scam targeting Microsoft Windows users has been discovered, urging caution when interacting with emails and download links. Cybercriminals are leading users to fraudulent websites resembling official Microsoft pages, prompting them to download what appears to be a legitimate Windows update. However, the file actually contains harmful malware designed to steal sensitive information like passwords and payment details.
According to cybersecurity experts at Malwarebytes, the scam employs websites mimicking Microsoft Support and Windows Update, using similar fonts, colors, and designs to fool unsuspecting users. To avoid falling victim, users are advised to refrain from clicking on urgent update links in emails or texts and instead manually check for updates through the Windows Update feature in Settings.
The deceptive nature of the downloaded file makes it challenging for users and some security software to identify the threat. Although the scam primarily targets users in France currently, experts emphasize the potential for rapid spread, urging all Windows users to exercise caution before downloading any suspicious updates.
To enhance security, users are encouraged to avoid update links from unverified sources and utilize the Windows built-in update system by navigating to Settings > Windows Update and selecting “Check for updates.” Any website offering a Windows update as a separate download should be treated with skepticism. Enabling automatic updates is also recommended to minimize the risk of falling prey to fake update scams.
Particularly, Windows 11 users should be vigilant against unexpected messages prompting urgent updates, emphasizing the importance of installing software exclusively through official Microsoft channels as the primary defense mechanism against such cyber threats.