• Facebook ads spread fake Windows 11 downloads that steal passwords and crypto wallets Attackers are running paid Facebook ads that look like official Microsoft promotions, then directing users to near-perfect clones of the Windows 11 download page. • ClickDownload Nowand instead of a Windows update, you get a malicious installer-one that silently steals saved passwords, browser sessions, and cryptocurrency wallet data. • “I just wanted to update Windows” The attack starts with something completely ordinary: a Facebook ad. • It looks professional, uses Microsoft branding, and promotes what appears to be the latest Windows 11 update. • If you have been meaning to keep your PC current, it feels like a convenient shortcut. • Click the ad and you land on a site that looks almost identical to Microsoft’s real Software Download page.
Article Summaries:
- Attackers are running paid Facebook ads that look like official Microsoft promotions, then directing users to near-perfect clones of the Windows 11 download page. Click Download Now and instead of a Windows update, you get a malicious installer-one that silently steals saved passwords, browser sessions, and cryptocurrency wallet data. “I just wanted to update Windows” The attack starts with something completely ordinary: a Facebook ad. It looks professional, uses Microsoft branding, and promotes what appears to be the latest Windows 11 update. If you have been meaning to keep your PC current,
Sources:
- https://www.malwarebytes.com/blog/scams/2026/02/facebook-ads-spread-fake-windows-11-downloads-that-steal-passwords-and-crypto-wallets (Latest source article published: 2026-02-20 10:00 UTC)