Do not download this Windows 10 update-it is packed with ransomware

If you receive an email notification from Microsoft about a Windows update, do not open it.

A security researcher at Trustwave SpiderLabs discovered a new malicious campaign that spoofs urgently updated emails from Microsoft to infect user systems with Cyborg ransomware.

The target user first receives an email titled ‘Install the latest Microsoft Windows Update now!’ Or ‘Critical Microsoft Windows Update!’ It’s already suspicious because Microsoft doesn’t push Windows updates through the operating system and via email.

The email itself contains only one line of text, “Please install the latest critical update from Microsoft attached to one email.” The file extension for fake update attachments is “.jpg”, but it is actually an executable file, not a picture.

This executable is a malicious .NET download designed by an attacker to deliver malware to an infected system.