Fake installer campaign: Microsoft reports malware threats
An active campaign uses counterfeit download pages and fake installers to distribute malware and compromise computer systems.
Microsoft has identified an active malicious campaign aiming to compromise users' computer systems. The attackers pose as legitimate software providers, deceiving victims through the creation of counterfeit download pages that mimic the original ones.
The attack mechanism is based on the distribution of repackaged installation archives containing malware. To help organizations identify, block, and respond effectively to this threat, Microsoft Defender experts have shared important details.
Specifically, they have disclosed the observed attack techniques, detections via Defender XDR, indicators of compromise, and a series of practical mitigation measures to protect systems.