Story perspectives

New Windows Malware Masquerades as Update, Steals Data

4/14/2026

Summary

Story summary

Malwarebytes Labs has identified a new Windows-targeting malware campaign disguised as a legitimate Windows update that steals passwords and payment details.
The malware guides users to a fraudulent support page and uses a legitimate framework to evade antivirus, yielding zero detections on VirusTotal.
Users should beware of the domain 'microsoft-update[.]support' and download updates directly from Windows Update in their settings.
Malwarebytes has updated its antivirus to better detect this threat.

1 of 1

Story summary

Malwarebytes Labs has identified a new Windows-targeting malware campaign disguised as a legitimate Windows update that steals passwords and payment details.
The malware guides users to a fraudulent support page and uses a legitimate framework to evade antivirus, yielding zero detections on VirusTotal.
Users should beware of the domain 'microsoft-update[.]support' and download updates directly from Windows Update in their settings.
Malwarebytes has updated its antivirus to better detect this threat.