Kaspersky found malicious software pretending to be Windows 11 upgrade program

Although Microsoft has announced the Windows 11 system, the official version of this system has not yet been released. Currently, Microsoft is only testing for users participating in the Insider Preview program.

Of course, you don’t need to download any software when you want to participate in the preview program. You only need to participate in the test in the Windows 10 system update module.

However, Microsoft has closed the option to participate in the development channel, so the conventional method cannot upgrade Windows 11, which gives malware developers an opportunity.

Kaspersky Security Lab found that malicious software pretending to be an upgrade program circulating on the Internet, its volume is as high as 1.75GB, making users believe that this is Windows 11.

After testing by Kaspersky Security Lab, researchers were found that this so-called upgrade program was not only well-designed but also painstakingly filled with redundant files.

After running the installer, the Windows 11 Build 21996.1 x64 activator installation interface will pop up, and there is even a so-called license agreement for users to accept.

But in fact, its built-in multiple downloaders will automatically install all kinds of junk software, of course, including viruses and backdoor programs, as well as stealers used to steal passwords.

As for why the volume is 1.75GB because the developer stuffed a large number of useless DLL files into the installation package, so as to trick the user into letting the user mean that this is true.

Hackers should only want to use downloaders to bundle various promotional software for profit, while installing backdoor programs and other viruses may want to make full use of users.