Switching to Windows 11 is a fairly common event these days. It is true that the download speed of the latest version of Windows has slowed down recently, but there are still plenty of users who decide to jump in and update their operating system. And at this point, it’s important to keep in mind that there are quite a few users who don’t update because they don’t want to, but there’s also some of them who don’t because they can’t.

And it’s because if there’s anything to talk about Windows 11 besides its news, that’s for sure your technical requirements. The requirement for Secure Boot and TPM 2.0 meant that many users could not update their operating system directly from the Windows 10 update manager. It is still possible to do this from ISO, but the process is more complicated, to the extent that there are users who do not see themselves in position to face it.

This is a very strange situation, because on the one hand we have users who can make the jump to Windows 11 but do not want to, and on the other hand people who would like to upgrade but cannot do so due to technical limitations.

The look of the fake Microsoft website. As you can see, its appearance is quite perfect.

As it might be otherwise, cybercriminals are aware of this circumstance and have decided to take advantage of it. The latest case can be found at Bleeping Computer, where they echo a website that pretends to be from Microsoft and offers to download an ISO file that users can use to upgrade to Windows 11. But, as you may have imagined, the downloaded file is not an intended update of the Microsoft operating system.

Instead, we find a pathogen dedicated to theft of browser data and cryptocurrency wallets, which also has the necessary features to be able to download new payloads, with which the operator of this malware can modify its functions. In its current state, it is able to capture data such as login details and other types of sensitive information entered into the browser, so its danger is very high. No Windows 11, just malware.

Kaspersky security message when trying to access the web.

The 38 megabyte download file named Windows11-setup_11.27541.ISO contains an executable file named Windows 11 setup, which installs data thieves when started by the user. Its creators have resorted to downloading it Various techniques to make an illegitimate website appear in legitimate search engine results. This, along with the appearance of a website that emulates a Microsoft identity, can mislead many users.

A) Yes, the key element is domain control. In this case, the download is located at windows11-upgrade11.com, which is a rather strange name due to its redundancy, which obviously has nothing to do with either Microsoft or Windows 11. So again, we have to remind you that we just have to resort. to official sources to avoid that due to negligence, a fake update of Windows 11 can cost us dearly.