Attackers are buying Facebook ad space to push what looks like an official Windows 11 download page, and victims who click “Download now” receive a 75 MB installer (ms-update32.exe) that plants an Electron-based thief, drops obfuscated PowerShell scripts, and persists via a large registry blob —...
Fake Microsoft update emails circulating
Don't be fooled: Microsoft isn't going to offer you "an experimental private version" of a Windows update, whatever the email says. Security vendor Sophos has Link Removed of a spammed malware campaign masquerading as a security update for various...