Watch out for fake Windows 11 installers – they’re riddled with malware

Want free Samsung credits? Here's $50 worth to get you started.

Reserve your interest in Samsung's new Galaxy lineup with your email—no purchase required. Enjoy up to $1,250 savings and a chance to win $5K in Samsung credit.

Reserve Now

Just a heads up, if you buy something through our links, we may get a small share of the sale. It’s one of the ways we keep the lights on here. Click here for more.

Windows 11 is now in “broad deployment for eligible devices,” but be careful where you download it from. The day after Microsoft’s announcement, security researchers noticed a website offering fake Windows 11 downloads that were full of malware.

The website in question was noticed by security researchers at HP. At first glance, the website seemed legitimate. It used Microsoft’s images, was similar in style to the official website, and had the URL “windows-upgraded.com.” Sounds legit, right?

When you clicked on the Download Now button, instead of a Microsoft file you got something else. A 1.5MB ZIP archive named “Windows11InstallationAssistant.zip.” That seems in line with Microsoft’s naming style, although it downloads straight from a Discord CDN (content delivery network).

READ MORE: Microsoft accidentally let anyone upgrade to Windows 11

Unpacking that file gets you a 754MB file folder, with an executable file inside. Just an FYI, that’s not how Microsoft deals with Windows upgrades anymore. Then again, not everyone has used the new install options to know what they look like.

Running that fake Windows 11 installer file sets a complicated chain of events into action. The end result? RedLine Stealer is installed, which BleepingComputer calls “the most widely deployed password, browser cookie, credit card, and cryptocurrency wallet info grabber.”

The upshot of this? There’s only one official place to get the upgrade to Windows 11 for your PC. That’s direct from Microsoft. Any other source runs the risk of malware, regardless of how legit the website seems.

That said, If your computer is still running an earlier version of Windows, use the PC Health Check app to find out if you can upgrade to Windows 11, and stay away from fakes.

Have any thoughts on this? Let us know down below in the comments or carry the discussion over to our Twitter or Facebook.

Editors’ Recommendations:

• Does Microsoft have any plans for a HoloLens 3?
• How to uninstall Windows 11 updates
• Android apps and taskbar upgrades are coming to Windows 11
• How to create, customize, and delete Google Chrome profiles

Joe Rice-Jones

Maker, meme-r, and unabashed geek with nearly half a decade of blogging experience at KnowTechie, SlashGear and XDA Developers. If it runs on electricity (or even if it doesn't), Joe probably has one around his office somewhere, with particular focus in gadgetry and handheld gaming. Shoot him an email at joe@knowtechie.com.