Make sure you are on the Official Windows Update site!!
A convincing fake Microsoft support site is pushing a bogus Windows 11 24H2 installer that looks legitimate, uses real installer tooling, and then drops password-stealing malware built with Electron, JavaScript and Python. The worrying bit is that it was specifically designed to look clean to both users and security tools, with Malwarebytes noting zero detections for the main executable at the time of analysis. It started by targeting French-speaking users, but there is nothing local about the trick, so the message to customers is simple, never download a Windows update from a website, email, or pop-up. Update Windows only from Settings, Windows Update, or from the official Microsoft Update Catalogue if a manual package is genuinely required.
This warning is intended to warn your users that that must equally vigilant at home, and be very careful as to how you apply updates, as this is a way to infect your corporate PC by infecting your home PC's and then attaching your cosporate PC's where you may not be treating your home network with the same suspician as what you would treat a public network! PLEASE contact your First Technology account manager to connect you with our training specialists to help ensure everybody is reminded on being vigilant at home as well!
|