Windows users are being warned about a new scam involving fake software updates that can compromise their security. Cybercriminals are directing users to deceptive websites resembling official Microsoft pages, where they are prompted to download what appears to be a legitimate Windows update. However, the file actually contains harmful malware designed to steal sensitive information such as passwords and payment details.
According to cybersecurity experts at Malwarebytes, these scam websites closely mimic Microsoft Support and Windows Update pages, using similar fonts, colors, and design to deceive users. To avoid falling victim to this scam, users are advised not to click on any suspicious update links but to manually check for updates through the Windows Update feature in the Settings menu.
The downloaded malicious file looks authentic, making it difficult for users and some security software to detect the threat. Although the current targets seem to be primarily in France, experts caution that these scams can quickly spread, emphasizing the importance of remaining cautious for all Windows users before downloading any updates.
To safeguard against such scams, users are urged to refrain from clicking on update links received via email, text messages, or social media. The safest way to update Windows is through the system’s built-in update mechanism by navigating to Settings > Windows Update and selecting “Check for updates.” Additionally, users should treat any website offering a separate Windows update download with suspicion.
Security experts recommend enabling automatic updates to reduce the risk of falling prey to fake update scams. Windows 11 users, in particular, are advised to be extra vigilant against unexpected messages urging urgent updates and should only install software through official Microsoft channels to enhance their defense against such attacks.