Fake Software Installers

Fake Software Installers Disable Windows Update and Weaken Microsoft Defender

A malware campaign has been observed distributing fake software installers through bogus download websites. The installers modify system settings to disable Windows Update and real-time protection in Microsoft Defender, disabling critical security updates and real-time malware protection on compromised systems. The campaign primarily targets China-based operations of multinational organizations and Chinese-speaking users. Microsoft has not released a specific patch for this campaign; users are advised to ensure Windows Update is enabled, avoid downloading software from unofficial sources, and keep Microsoft Defender real-time protection active.