Windows users are being warned about a new scam targeting them with fake software updates. Cybercriminals are leading users to deceptive websites that mimic official Microsoft pages, tricking them into downloading what appears to be a legitimate Windows update. However, the file actually contains dangerous malware designed to steal sensitive information such as passwords and payment details.

According to cybersecurity researchers at Malwarebytes, the scam utilizes websites that closely resemble Microsoft Support and Windows Update pages, copying fonts, colors, and designs to appear authentic. Users are advised not to click on any urgent update links received via email, text, or notifications and instead should directly check for updates by accessing Settings > Windows Update.

The downloaded file looks legitimate, making it challenging for users and security software to detect the threat. While the current targets seem to be primarily in France, experts caution that these scams can quickly spread, urging all Windows users to exercise caution before downloading any suspicious updates.

To stay safe, users should avoid trusting update links from emails, texts, or social media and should rely on Windows’ built-in update system by going to Settings > Windows Update and selecting “Check for updates.” Any website offering a separate Windows update download should be viewed skeptically. Enabling automatic updates is also recommended by security experts to reduce the risk of falling victim to fake update scams.

Windows 11 users, in particular, should be cautious of unexpected messages prompting urgent updates and should only install software through official Microsoft channels as a defense against such attacks.