fake updates

A new wave of fake Windows 11 24H2 update sites is putting a familiar trust signal to dangerous use: the promise of a system update. Researchers say attackers are impersonating Microsoft support pages and luring users into downloading malware that can steal saved passwords, browser cookies...

Attackers are buying Facebook ad space to push what looks like an official Windows 11 download page, and victims who click “Download now” receive a 75 MB installer (ms-update32.exe) that plants an Electron-based thief, drops obfuscated PowerShell scripts, and persists via a large registry blob —...

Fake Microsoft update emails circulating Don't be fooled: Microsoft isn't going to offer you "an experimental private version" of a Windows update, whatever the email says. Security vendor Sophos has Link Removed of a spammed malware campaign masquerading as a security update for various...