Fake Software Installers Disable Windows Update and Weaken Microsoft Defender
Summary
A new malware campaign is distributing malicious installers through fake software download websites. These installers disable Windows Update and weaken Microsoft Defender on compromised systems. The campaign has primarily targeted organizations operating in China and Chinese-speaking users.
IFF Assessment
This campaign poses a direct threat to defenders by disabling critical security features and making systems more vulnerable to further attacks.
Defender Context
Defenders should be aware of the tactics used in this campaign, such as the impersonation of trusted vendors and the disabling of security features. It highlights the importance of educating users about safe software download practices and ensuring that endpoint security solutions are properly configured and updated.