Kaspersky urges caution against fake Windows 11 installer

Cybersecurity company Kaspersky says scammers are distributing malware and adware made to look like Microsoft Windows 11 urging users to take caution.

Cybersecurity company Kaspersky is warning eager users to take care when downloading and installing preview versions of Windows 11 after detecting malware-laden fake installers.

With the new OS from Microsoft highly-anticipated, many users have flocked to the Windows Insiders programme to experience and download Windows 11 preview versions.

But researchers from Kaspersky have warned of malware-riddled fake Windows 11 installers targeting keen Microsoft fans, and have urged users to be on their guard. The company says that hundreds of such attempts by fake malware-laden Windows 11 downloaders to install and run other applications in the background have already been nullified.

"Kaspersky products have already defeated several hundred infection attempts that used similar Windows 11–related schemes. A large portion of these threats consists of downloaders, whose task is to download and run other programmes," Kaspersky said in a statement on its website.

"Those other programmes can be very wide-ranging, from relatively harmless adware, which our solutions classify as not-a-virus, to full-fledged Trojans, password stealers, exploits, and other nasty stuff.

"Download Windows 11 from official sources only, as Microsoft advises. So far, Windows 11 is officially available only to participants in the Windows Insider programme that is, you have to register. You’ll also need a device with Windows 10 already installed," Kaspersky added.

In one example, Kaspersky spotted an installable file called '86307_windows 11 build 21996.1 x64 + activator.exe' which seems related to Windows 11 installation and some sort of license activator. This 1.76GB file may look genuine but all it has is a DLL file with some useless information.

However, running the installable file, which has been made to look like a genuine Windows Installation Wizard, starts downloading other applications in the background. This second installable file even has a licence agreement that states that the installer will install some sponsored apps to install Windows 11 on your PC.

The moment a user agrees, it starts downloading and installing malicious files from the internet, causing a serious threat to the data saved on the device.

Share

Featured Articles

Tech & AI LIVE: Key Events that are Vital for Cybersecurity

Connecting the world’s technology and AI leaders, Tech & AI LIVE returns in 2024, find out more on what’s to come in 2024

MWC Barcelona 2024: The Future is Connectivity

Discover the latest in global technology and connectivity at MWC Barcelona 2024, where industry giants converge to discuss 5G, AI and more industry trends

AI-Based Phishing Scams Are On The Rise This Valentine’s Day

Research from Egress Threat Intelligence, Avast, Cequence Security & KnowBe4 outlines how AI is being used in dating app phishing scams on Valentine’s Day

Speaker Lineup Announced for Tech Show London 2024

Technology & AI

Darktrace predicts AI deepfakes and cloud vulnerabilities

Cloud Security

Secure 2024: AI’s impact on cybersecurity with Integrity360

Technology & AI