Beware the Fake Windows 11 “Update” That Installs Malware
A new scam is circulating a fake Windows 11 update that looks almost identical to the real thing. Find out how to protect your business from this convincing malware trap.
Most people don't think twice when they see a Windows update prompt.
Click. Wait. Done.
It feels routine, and honestly, it should be safe. Updates are meant to protect your device, not put it at risk.
That's exactly why a new scam is catching businesses out.
What's happening
There's a fake Windows 11 update circulating that looks almost identical to the real thing.
It's designed to resemble an official Microsoft support page, with the same layout, tone, and “helpful” language. Nothing jumps out as suspicious at first glance. It presents what looks like a normal Windows 11 update and encourages you to download it.
But when you click the button, you're not installing an update.
You're installing malware.
Why it's more dangerous than the usual scams
This isn't one of those obvious, badly written pop-ups.
The file is built using legitimate tools, packaged to look authentic, and labelled in a way that suggests it's from Microsoft. In some cases, even security tools may not flag it immediately because, on the surface, it appears “clean”.
The real issue is behavioural: people are trained to trust updates. So when a prompt looks familiar, it's easy to click without thinking, especially in a busy workday.
What to tell your team (simple, practical rules)
If you want a safer approach, keep it boring and consistent:
- Only run updates through Windows Settings — On Windows 11, updates should be managed inside the built-in Settings app.
- Avoid “manual update” downloads from random pages — If you ever need to download something, go directly to Microsoft's official website, not a link from an email or a page you landed on.
- If it's unexpected, pause — If someone sees an update prompt they weren't expecting, the best move is to stop and double-check before clicking anything.
You don't need to make your team paranoid. But you do want them to recognise this: attackers are now copying the most normal, trusted processes because that's where people drop their guard.
If you'd like help strengthening your team's awareness and your business's cyber defences, get in touch with Jedi Services today.
