Fake Windows Support website offers 'cumulative update' for version 24H2 but delivers password-stealing malware that can avoid anti-virus detection

Fake Windows Support website offers ‘cumulative update’ for version 24H2 but delivers password-stealing malware that can avoid anti-virus detection | PC Gamer Skip to main content Join The Club – Join our community JOIN NOW 11Premium Benefits 24/7Access Available 28K+Active Members Exclusive Articles Member-only articles Weekly Newsletters Gaming & entertainment news Commenting Join the discussion Member Badges Earn badges as you go Exclusive Competitions Members-only prize draws Early Access See the latest gaming news first GET CLUB ACCESS QUICK For the quickest way to join, simply enter your email below and get access. We will send a confirmation and sign you up to our newsletter to keep you updated on all your gaming news. Contact me with news and offers from other Future brands By submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over. FIND OUT ABOUT OUR MAGAZINE Want to subscribe to the magazine? Click the button below to find out more information. Find out more GET CLUB ACCESS QUICK Join the club for quick access. Enter your email below and we’ll send confirmation, and sign you up to our newsletter. Contact me with news and offers from other Future brands Sign Up By submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over. Welcome to PC Gamer club ! Hi , Your membership journey starts here. Keep exploring and earning more as a member. MY ACCOUNT Earn your first badge Read 1 article to unlock your first badge. Keep earning badges Explore ways to get more involved as a member. Latest Games News Breaking gaming news and updates Explore Latest Hardware News News and reviews of the latest PC hardware. Explore See what you’ve unlocked. Explore your membership benefits. Explore Member Exclusives Stay Ahead with PC Gamer Get the biggest gaming news, reviews, and releases straight to your inbox. Explore Sign Out Open menu Close main menu PC Gamer THE GLOBAL AUTHORITY ON PC GAMES US Edition UK US Canada Australia Subscribe Sign in View Profile Sign out Search Search PC Gamer Games Hardware News Reviews Guides Video Forum More PC Gaming Show PC Gamer Clips Software Codes Coupons Movies & TV Magazine Newsletter Affiliate links Meet the team Community guidelines About PC Gamer PC Gamer Magazine SubscriptionWhy subscribe?Subscribe to the world’s #1 PC gaming magTry a single issue or save on a subscriptionIssues delivered straight to your door or device From$1Subscribe now PopularClipsCrimson DesertMarathonBest PC gearQuizzesUpcoming games Hardware Fake Windows Support website offers ‘cumulative update’ for version 24H2 but delivers password-stealing malware that can avoid anti-virus detection News By Jess Kinghorn published 13 April 2026 Stay safe, folks. When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works. (Image credit: solarseven, via Getty Images) Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter PC Gamer The biggest gaming news, reviews and hardware deals Keep up to date with the most important stories and the best deals, as picked by the PC Gamer team. Become a Member in Seconds Unlock instant access to exclusive member features. Contact me with news and offers from other Future brands Receive email from us on behalf of our trusted partners or sponsors By submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over. You are now subscribed Your newsletter sign-up was successful Want to add more newsletters? Every Friday GamesRadar+ Your weekly update on everything you could ever want to know about the games you already love, games we know you’re going to love in the near future, and tales from the communities that surround them. Signup + Every Thursday GTA 6 O’clock Our special GTA 6 newsletter, with breaking news, insider info, and rumor analysis from the award-winning GTA 6 O’clock experts. Signup + Every Friday Knowledge From the creators of Edge: A weekly videogame industry newsletter with analysis from expert writers, guidance from professionals, and insight into what’s on the horizon. Signup + Every Thursday The Setup Hardware nerds unite, sign up to our free tech newsletter for a weekly digest of the hottest new tech, the latest gadgets on the test bench, and much more. Signup + Every Wednesday Switch 2 Spotlight Sign up to our new Switch 2 newsletter, where we bring you the latest talking points on Nintendo’s new console each week, bring you up to date on the news, and recommend what games to play. Signup + Every Saturday The Watchlist Subscribe for a weekly digest of the movie and TV news that matters, direct to your inbox. From first-look trailers, interviews, reviews and explainers, we’ve got you covered. Signup + Once a month SFX Get sneak previews, exclusive competitions and details of special events each month! Signup + Join the club Get full access to premium articles, exclusive features and a growing list of member rewards. Explore An account already exists for this email address, please log in. Subscribe to our newsletter Even though I’ve been immersed in all things tech for some time now, I’m not arrogant enough to think I’ll never be caught out by a phishing email or downloading dodgy software. That’s especially true as online scams grow in sophistication—for instance, there’s a fake Windows support page that tricks users into downloading password-stealing malware.The fake support page alleges a ‘cumulative update’ for ‘Windows Update version 24H2,’ complete with a KB article number that’s passable at a glance. Anyone who actually hits the big blue ‘Download the update’ button will get a convincingly spoofed Windows Installer package. Unfortunately, this download is actually malware that can hoover up “passwords, payment details, and account access”, according to cybersecurity company Malwarebytes.Even downloading the dodgy software may not raise alarm bells at first. The suspicious package was built using WiX Toolset 4.0.0.5512, which Malwarebytes describes as “a legitimate open-source installer framework.” The 83 MB package is called ‘WindowsUpdate 1.0.0.msi,’ with an Author field that reads “Microsoft,” and a title of “Installation Database.” The comments field also alleges that the file offers “the logic and data required to install WindowsUpdate.” So, that’s how it escapes user notice—but it may also squeak past whatever anti-virus you have installed too. “At the time of analysis, VirusTotal showed zero detections across 69 engines for the main executable and 62 for the VBS launcher. No YARA rules matched, and behavioural scoring classified the activity as low risk,” Malwarebytes reported. “This is not a failure of any single tool. It’s the intended result of the malware’s architectur