Cybersecurity
Microsoft Detects Fake Installer Campaign Targeting Software Users with Multi-Stage Malware
Microsoft Defender Experts tracked an active campaign impersonating software vendor websites to distribute malicious installers that regenerate themselves with every download, then establish persistence mechanisms, weaken Windows protection, and attempt to connect to attacker-controlled infrastructure. The observed activity focuses on China-linked operations and Chinese-speaking users, with infections in the healthcare, manufacturing, gaming, technology, government, and education sectors.
2026-09-01