A cybersecurity company Kaspersky Labs has just posted a report on the new type of malware that is being distributed via Windows 11 installers.
IMG source: Kaspersky.com
Kaspersky has shown one example of fake Windows 11 installers that are being distributed through hoax websites with the purpose to install ads and trojans.
A file named 86307_windows 11 build 21996.1 x64 + activator.exe with file size as large as 1.75GB holds one DLL file which contains a lot of useless information to present the wrong file size. Once the downloaded executable is started, it runs the installer that looks like an ordinary Windows installation wizard. This application will actually download another executable installer that presents a license agreement to the user. Once the license agreement (that nobody reads) is accepted, a variety of malicious programs will be installed on the affected machine.
A large portion of malware consists of downloaders whose task is downloading and running other programs on the machine. Those programs can contain relatively harmless adware to full-fledged Trojans, exploits, password stealers, and others.
With that said, downloading ISO files from untrusted and shady resources is not a very smart thing to do. Many Windows users are fully aware of that, but also it seems that many are not.
Due to the fact that Microsoft is making Windows 11 free to test for anyone, it is highly recommended to acquire the Windows 11 software installation by joining the Windows 11 Insider program and thus remain perfectly safe.