Windows users are being targeted by a new scam involving fake software updates that contain harmful malware. Cyber attackers are directing users to deceptive websites that mimic official Microsoft pages, urging them to download what appears to be a legitimate Windows update. These fake pages closely imitate Microsoft Support and Windows Update, using similar fonts, colors, and designs to deceive unsuspecting users.

Malwarebytes researchers have issued a warning advising users not to click on any urgent update links received via email, text, or notifications. Instead, users should manually check for updates through the Windows Update feature in the Settings menu. The downloaded malware appears authentic, making it difficult for users and some security software to detect the threat.

Although the current targets seem to be primarily in France, experts caution that these scams can quickly spread to other regions. To protect themselves, users are advised to avoid clicking on update links sent through email, text messages, or social media. It is safest to install updates directly through the Windows built-in update system by going to Settings > Windows Update and selecting “Check for updates.”

Users should be wary of any website offering a separate download for a Windows update and consider enabling automatic updates to reduce the risk of falling victim to fake update scams. Windows 11 users are specifically urged to exercise caution with unexpected messages requesting urgent updates, emphasizing the importance of only installing software through official Microsoft channels to guard against such attacks.