Home » Technology » You think you are installing Windows 11, and this is malware

You think you are installing Windows 11, and this is malware

The newly discovered cyber attack is surprising and incredulous. Users agree to install the malware.

While accessing the Windows 11 test builds available through the Windows Insider Program channel is relatively straightforward, not everyone knows how it works. According to Kaspersky, more and more users download and install applications that pretend to be the Windows 11 installer, but are simply not very well disguised malware.

The software described by cybersecurity researchers is almost an example of a “virus for the lazy”. The file containing them “86307_windows 11 build 21996.1 x64 + activator.exe” may seem credible on the outside (it has a volume of 1.75 GB, and its name contains the number of the actual Windows 11 build, although it is from many months ago), but it contains only one file A DLL that does nothing but download and run another file.

This, in turn, displays to the user a “license agreement” dialog, from which you can learn (if anyone reads it) that “sponsored applications” will be installed on your computer in a moment. After giving consent, the user receives malware installed in the system at his own request – according to Kasperski, the target payload is dynamically changed and can be both advertising programs, Trojan horses or applications stealing login data.

You think you are installing Windows 11, and this is malware

We recommend that you sign up for Windows 11 before it’s publicly available Windows Insider.

Leave a Comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.