Ransomware Alert: Email to update to Windows 10
About 14 million machines were upgraded to Windows 10 in past few days, but millions more are waiting for Microsoft’s notification for update.
“Get Windows 10” app says Microsoft is rolling out the free upgrade in waves; “Watch for your notification so that you can start your upgrade. Your notification to upgrade could come as soon as a few days or weeks.”
That notification has become an exploitation opportunity for bad guys who are sending out fake Windows 10 upgrade emails along with supposedly zipped Windows 10 download attachments that ultimately install ransomware on victims’ PCs.
The “Upgrade to Windows 10 for free” email has been spoofed so that it appears to be coming from Microsoft via update@microsoft.com. The header, however, shows that it came from an IP in Thailand. The email is using the same color scheme as the Windows 10 update app and claims, “This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.”
Cisco pointed out a “red flag” of characters that did not parse properly.
Microsoft does send emails to Windows Insiders as well as to those who reserved Windows 10 via the company’s app. But Microsoft is not going to email its newest OS to users. Check out below guide to upgrade your PCs without Microsoft’s invitation.
On your mark, get set, update! Windows 10 is here!!
Victims who are tricked into believing that Microsoft emailed them Windows 10, download the zipped file, extract it and run the executable, then see the CTB-Locker ransomware notice. Users are given 96 hours to submit the ransom payment to unlock their documents, photos, databases and other important files.
Key to avoid being scammed is to be vigilant. No company, including Microsoft, Apple or Google, delivers software updates using emails. Have a good anti-virus solution, there are plenty available free or at a minimal annual subscription.
