Kaspersky urges caution against fake Windows 11 installer

Cybersecurity company Kaspersky says scammers are distributing malware and adware made to look like Microsoft Windows 11 urging users to take caution.

Cybersecurity company Kaspersky is warning eager users to take care when downloading and installing preview versions of Windows 11 after detecting malware-laden fake installers.

With the new OS from Microsoft highly-anticipated, many users have flocked to the Windows Insiders programme to experience and download Windows 11 preview versions.

But researchers from Kaspersky have warned of malware-riddled fake Windows 11 installers targeting keen Microsoft fans, and have urged users to be on their guard. The company says that hundreds of such attempts by fake malware-laden Windows 11 downloaders to install and run other applications in the background have already been nullified.

"Kaspersky products have already defeated several hundred infection attempts that used similar Windows 11–related schemes. A large portion of these threats consists of downloaders, whose task is to download and run other programmes," Kaspersky said in a statement on its website.

"Those other programmes can be very wide-ranging, from relatively harmless adware, which our solutions classify as not-a-virus, to full-fledged Trojans, password stealers, exploits, and other nasty stuff.

"Download Windows 11 from official sources only, as Microsoft advises. So far, Windows 11 is officially available only to participants in the Windows Insider programme that is, you have to register. You’ll also need a device with Windows 10 already installed," Kaspersky added.

In one example, Kaspersky spotted an installable file called '86307_windows 11 build 21996.1 x64 + activator.exe' which seems related to Windows 11 installation and some sort of license activator. This 1.76GB file may look genuine but all it has is a DLL file with some useless information.

However, running the installable file, which has been made to look like a genuine Windows Installation Wizard, starts downloading other applications in the background. This second installable file even has a licence agreement that states that the installer will install some sponsored apps to install Windows 11 on your PC.

The moment a user agrees, it starts downloading and installing malicious files from the internet, causing a serious threat to the data saved on the device.

Share

Featured Articles

Cooperation Key Theme at Microsoft Endpoint Security Summit

The Microsoft Endpoint Security Summit brought together leaders in the cybersecurity industry to discuss strategies for securing endpoints on Windows

Why the UK is Listing Data Centres as Critical Cyber Assets

Being Western Europe's leader in number of Data Centres, the UK has decided to take steps to ensure they receive adequate protection from cyber threats

Trustwave Reveals the Financial Sector's Cyber Threats

Although it's not new to think that financial services organisations are prime targets for cybercriminals, the threat landscape they find themselves in is

TCS and Google Cloud Join for Solution to Secure the Cloud

Technology & AI

Cybersecurity Conglomerate Reveals Threats Facing Consumers

Cyber Security

Decoding the US' Most Misunderstood Data Security Terms

Cyber Security