Fake Windows Support website offers ‘cumulative update’ for version 24H2 but delivers password-stealing malware that can avoid anti-virus detection
Researchers have discovered a fake Windows support website that is distributing sophisticated malware disguised as a legitimate cumulative security update for Windows version 24H2. The malicious software is specifically engineered to steal passwords and credentials from infected systems while possessing the capability to evade anti-virus detection mechanisms, making it particularly dangerous to unsuspecting users who believe they are downloading an official system update. This type of attack exemplifies the increasingly sophisticated nature of online scams and phishing operations that skillfully exploit user trust in legitimate software update processes and security patches. The malware’s ability to bypass traditional security software represents a notable technical threat. Such threats pose a significant security risk to Windows users worldwide and underscore the critical importance of verifying the authenticity of download sources before installing any system updates or security patches. Users are strongly advised to download Windows updates only directly from Microsoft’s official channels or through Windows Update.