Computer Hope
Microsoft => Microsoft Windows => Windows 10 and 11 => Topic started by: Geek-9pm on July 16, 2017, 02:10:28 PM
-
Have any one of you have experience or knowledge about fake Windows updates?
Here is a ten-year old article that was recently updated:
http://www.express.co.uk/life-style/science-technology/786283/Microsoft-windows-10-scam-tech-support-warning
Last year Microsoft adopters were targeted by a number of shocking scams including receiving cold calls from a self-appointed Microsoft employee and malware that disguises itself as a security update, making you call a fake Microsoft hotline.
When was that? Does it still happen? Should I turn off automatice updates?
Just asking.... :)
-
I woud say that using Windows Update is safe enough, or else you can use Belarc Advisor which queries Microsoft servers, but don't respond to emails or popups encountered while web browsing.
-
It's a 10 year old article Geek...
Your News priviledges are gonna be revoked.
-
The " malware that disguises itself as a security update" Was NOT through windows update. It was like those common fake advertisements saying "100 infections Found! Clean now?" and clicking the ad takes you to a scammy fake AV site. Just in this case it was "You need ### updates. Install now?" and similar prompts.
-
Don't worry; Windows Update connects only to Microsoft's servers.
If you must manually download and run any updates, just be sure they're from Microsoft.com, and not anywhere else.
-
It's a 10 year old article Geek...
Your News priviledges are gonna be revoked.
Patio, Windows 10 was not out there 10 years ago. Thearticle claims there are now recent cases of the old trick taht was reported 10 years ago. Windows 10 is the target in the new fake messages.
(http://cdn.images.express.co.uk/img/dynamic/59/590x/secondary/pop-up-message-884378.jpg)
Notice the image claims taht the warning is from Microsft.
-
You know what combats this?
User education. You have to be incredibly ignorant (not in an insulting way) and unfamiliar with how computer Operating Systems and web browsers work to fall for such a transparent scam.
The scam starts by redirecting users to a fake Microsoft website which suggests there's a virus on their PC and prompts them to phone an emergency hotline.
These are not Fake Windows Updates. Like I said, they don't even involve Windows Update. They are arbitrary pop ups and redirects that occur when you visit shady websites. A better question to ask is why users who don't even have the experience and understanding of how the system works to be able to discern a real, legitimate message from Microsoft from a basic Window.Alert() are browsing the sort of websites that impose pop ups and redirects. It's the same problem that causes people to so easily fall victim to malware via torrents; They basically know just enough to get themselves in trouble. It's like knowing how to put a manual transmission car (to callback a previous thread!) into gear but not knowing how to use the brake.
There is a very good reason that Browsers have moved their Alert dialogs from standard OS Dialog boxes to boxes contained within the website, and prefixed them with text indicating that the message is coming from the website- it's an attempt to help more informed users who understand the difference.
And it's hardly limited to tech, either. For every "Microsoft Support" scam that preys on people's ignorance of Windows and computers, there is an IRS Scam that preys on people's ignorance of how the organization works. For example, I know somebody who fell for the IRS scam but was stopped when buying gift cards. It's a somewhat understandable kind of ignorance to not understand the IRS. It's quite another to think they have jurisdiction in Canada. It is this sort of almost wilful ignorance that scams prey on.