Kaspersky urges caution against fake Windows 11 installer

Cybersecurity company Kaspersky says scammers are distributing malware and adware made to look like Microsoft Windows 11 urging users to take caution.

Cybersecurity company Kaspersky is warning eager users to take care when downloading and installing preview versions of Windows 11 after detecting malware-laden fake installers.

With the new OS from Microsoft highly-anticipated, many users have flocked to the Windows Insiders programme to experience and download Windows 11 preview versions.

But researchers from Kaspersky have warned of malware-riddled fake Windows 11 installers targeting keen Microsoft fans, and have urged users to be on their guard. The company says that hundreds of such attempts by fake malware-laden Windows 11 downloaders to install and run other applications in the background have already been nullified.

"Kaspersky products have already defeated several hundred infection attempts that used similar Windows 11–related schemes. A large portion of these threats consists of downloaders, whose task is to download and run other programmes," Kaspersky said in a statement on its website.

"Those other programmes can be very wide-ranging, from relatively harmless adware, which our solutions classify as not-a-virus, to full-fledged Trojans, password stealers, exploits, and other nasty stuff.

"Download Windows 11 from official sources only, as Microsoft advises. So far, Windows 11 is officially available only to participants in the Windows Insider programme that is, you have to register. You’ll also need a device with Windows 10 already installed," Kaspersky added.

In one example, Kaspersky spotted an installable file called '86307_windows 11 build 21996.1 x64 + activator.exe' which seems related to Windows 11 installation and some sort of license activator. This 1.76GB file may look genuine but all it has is a DLL file with some useless information.

However, running the installable file, which has been made to look like a genuine Windows Installation Wizard, starts downloading other applications in the background. This second installable file even has a licence agreement that states that the installer will install some sponsored apps to install Windows 11 on your PC.

The moment a user agrees, it starts downloading and installing malicious files from the internet, causing a serious threat to the data saved on the device.


Featured Articles

The impact data poisoning has on cyber and AI

We take a look at why the risks of data and AI poisoning is continuing to wreak havoc on the cybersecurity industry

Five innovative ways AI can help prevent cyber attacks

A cyber hack at Okta put businesses on high alert, and here, we examine how AI can help prevent future breaches

SailPoint delivers new non-employee risk management solution

The new capability will help organisations manage non-employees while also supporting regulatory compliance requirements and reducing third-party risk

Akamai shares details of Asia’s record-breaking DDoS attack

Network Security

Vive la France and Cyberscore Law is rallying cry for Europe

Operational Security

(ISC)² signs MOU with UAE to train nation’s cyber workforce

Operational Security