A new scam targeting users of Microsoft’s Windows operating system has recently emerged, prompting a warning for increased vigilance. Cybercriminals are luring Windows users to fake websites resembling official Microsoft pages, urging them to download what appears to be a legitimate Windows update. However, the downloaded file actually contains malicious software designed to steal sensitive information like passwords, payment details, and account credentials.
According to cybersecurity experts at Malwarebytes, these deceptive websites mimic Microsoft Support and Windows Update pages, replicating Microsoft’s fonts, colors, design, and web addresses to deceive users effectively. To avoid falling victim to this scam, users are advised not to click on any suspicious links in emails, texts, or notifications claiming to require urgent updates. Instead, they should directly check for updates through Windows Update in the Settings menu.
The scam is particularly concerning as the downloaded file looks genuine, making it difficult for users and some security software to detect the threat. Although initial targets seem to be in France, experts caution that the scam could quickly spread, emphasizing the importance of caution for all Windows users before downloading any updates.
To safeguard against such scams, users should never trust update links received via email, text messages, or social media. The most secure method to install updates is through the Windows built-in update system. By accessing Windows Update in the Settings menu under Start and selecting “Check for updates,” users can ensure they are installing authentic updates.
Any website offering a Windows update as a separate download should be approached with suspicion, according to security professionals. They recommend enabling automatic updates to reduce the risk of falling for fake update scams and the need to manually install files. Windows 11 users are specifically advised to be cautious of unexpected messages demanding urgent updates, emphasizing the importance of obtaining software exclusively from official Microsoft channels to prevent falling victim to such malicious attacks.