A new scam targeting Microsoft Windows users has been identified, urging caution when interacting with emails and download links. Cyber attackers are luring users to fake websites resembling official Microsoft pages, prompting them to download what appears to be a genuine Windows update. However, this file actually contains harmful malware aimed at stealing sensitive information such as passwords and payment details.
According to cybersecurity experts at Malwarebytes, the scam involves websites that mimic Microsoft Support and Windows Update pages. These fake sites replicate Microsoft’s branding elements, making them convincing to unsuspecting users. Malwarebytes advises users not to click on any suspicious update links but to verify updates directly through the Windows Update feature in Settings.
The malicious file being distributed appears authentic, making it harder for users and some security software to detect the threat. While the scam has mainly targeted users in France, experts caution that it could quickly spread to other regions. All Windows users are advised to exercise caution and refrain from downloading suspicious files.
To safeguard against such scams, users should avoid clicking on update links from unverified sources like emails, texts, or social media. The recommended method for updating is to use Windows’ built-in update system by navigating to Settings > Windows Update and selecting “Check for updates.” Users should be wary of any website offering separate Windows updates for download and are encouraged to enable automatic updates to minimize the risk of falling victim to fake update schemes.
Specifically, Windows 11 users should be extra vigilant against unexpected urgent update messages and should only install software through official Microsoft channels to protect themselves from potential cyber threats.