Fake Windows 10 updates infect systems with the Magniber ransomware

[Maxstar]

Fake Windows 10 updates are being used to distribute the Magniber ransomware in a massive campaign that started earlier this month. Over the past few days, BleepingComputer has received a surge of requests for help regarding a ransomware infection targeting users worldwide.

While researching the campaign, we discovered a topic in our forums where readers report becoming infected by the Magniber ransomware after installing what is believed to be Windows 10 cumulative or security update.

This new report comes via BleepingComputer which noticed a lot of user reports regarding this new infection that seems to be affecting people worldwide. The malicious updates pretend to be real and some of them even have fake knowledge base (KB) IDs attached with them. Here are some of these fake malicious updates:

Win10.0_System_Upgrade_Software.msi
Security_Upgrade_Software_Win10.0.msi
System.Upgrade.Win10.0-KB47287134.msi
System.Upgrade.Win10.0-KB82260712.msi
System.Upgrade.Win10.0-KB18062410.msi
System.Upgrade.Win10.0-KB66846525.msi

Sources:
Fake Windows 10 updates infect you with Magniber ransomware
Beware: Magniber ransomware now spreading via fake malicious Windows updates