Blog Layout

Malware Disguised As Windows 11 Upgrade Targets Windows 10 Users

sccomputerguys • Feb 28, 2022

According to researchers at HP, there's a new threat to worry about.  Hackers have recently begun disguising malware as Windows 11 upgrades and are using them to target Windows 10 users who are anxious to move to Microsoft's latest OS. This new campaign begins like many others with an email informing the recipient that if they click the link provided in the email, they'll be taken to Microsoft's website where they can get a free copy of Windows 11.

Victims who click the link will be taken to a site that is a very good and convincing replica of the legitimate Microsoft website.  Only a careful inspection of the URL will reveal that something is amiss and most users don't pay much attention to URLs so this is quite likely to go unnoticed.

Once on the site, the victim will be prompted to download the file that promises to be Windows 11.  It is nearly 800 MB in size so at that point it still seems legitimate.

Unfortunately, if the victim runs the downloaded file they seal their fate as it will install malware on their system.

At present, the most common malware deployed via this campaign is RedLine Stealer which steals stored passwords, cookies, saved payment card information, and cryptocurrency wallet information. So if it lands on your system or finds its way into your company's network it can deal significant damage with long lasting consequences.

The worst part of all this is that Microsoft has unintentionally made the issue worse than it needs to be.  There are a great many Windows 10 users who cannot get Windows 11 from official distribution channels due to hardware incompatibilities. That has created an enormous opportunity for hackers around the world and they are wasting no time exploiting that opportunity.

By sccomputerguys 22 Jul, 2022
Do you own one or more of the following products made by Cisco? The RV110W Wireless-N VPN Firewall The RV130 VPN Router The RV130W Wireless-N Multifunction VPN Router The RV215W Wireless-N VPN ...
By sccomputerguys 21 Jul, 2022
Do you use Microsoft Teams?  If so, you'll be thrilled to know that the Redmond Giant is continuing to pour resources into improving the software with a specific focus on audio and ...
By sccomputerguys 20 Jul, 2022
Corporate branding can be worth its weight in gold and certain images are absolutely iconic.  The Golden Arches, the Nike "swoosh," and Apple's Apple all come to mind. Logo images give companies ...
By sccomputerguys 19 Jul, 2022
Remember the Heartbleed scare we had a couple years back?  It was a nasty side-channel attack that was somewhat exotic and difficult to pull off, and it was absolutely devastating and sent ...
By sccomputerguys 18 Jul, 2022
Microsoft Exchange servers are once more in the crosshairs of hackers around the world.  Most recently, hacking groups have been specifically targeting them to deploy BlackCat ransomware. As is common among ransomware ...
By sccomputerguys 16 Jul, 2022
If you grew up in the days before the internet, it's absolutely staggering to think of all the ways that mobile technology has changed our lives (and mostly for the better). Remember ...
By sccomputerguys 15 Jul, 2022
It may seem as though Internet Explorer is the browser that will not die, but according to Microsoft, it is now a step closer to breathing its last virtual breath. Microsoft has ...
By sccomputerguys 14 Jul, 2022
If you're involved with IT Security at any level and if your network includes Linux servers, keep a watchful eye out for the new Panchan botnet. It first appeared in the wilds ...
By sccomputerguys 13 Jul, 2022
These days, companies spend significant sums of money to protect themselves from cyber criminals.  The threat matrix is vast, and attacks can come from almost any quarter. That is why many companies ...
By sccomputerguys 12 Jul, 2022
Do you receive healthcare of any kind from Kaiser Permanente?  If so, be aware that they recently published a data breach notification indicating that an unidentified attacker accessed an email account that ...
More Posts
Share by: