Back to today’s briefing

Story perspectives

Fake Windows 11 Update Targets Users, Steals Sensitive Data

4/16/2026

28 4 Full Breakdown

Summary

Story summary

Malwarebytes security researchers have identified a fake Windows 11 24H2 update campaign that steals sensitive data from users.
Attackers created a convincing support page at "microsoft-update[.]support" to lure users into downloading the malware disguised as an update.
The malicious file is named "WindowsUpdate 1.0.0.msi."
It can steal passwords, cookies, and account sessions.
The stolen data is sent to attacker-controlled servers.

1 of 1

Story summary

Malwarebytes security researchers have identified a fake Windows 11 24H2 update campaign that steals sensitive data from users.
Attackers created a convincing support page at "microsoft-update[.]support" to lure users into downloading the malware disguised as an update.
The malicious file is named "WindowsUpdate 1.0.0.msi."
It can steal passwords, cookies, and account sessions.
The stolen data is sent to attacker-controlled servers.