Urgent Windows warning issued and don't ignore it if you use Microsoft Office

Anyone with a Windows-powered PC needs to stay alert and watch out for a worrying new scam. This latest attack is seeing hackers shift direction and move away from fake emails and texts, which are often now captured by highly efficient spam detection software. Instead of trying to get users to click on links in messages, cyber crooks are now using social media platforms, such as TikTok, to spread data-stealing bugs.

Short videos are being posted online which claim that Windows users can get access to software such as Microsoft Office and Spotify Premium for free.

Viewers are then guided through step-by-step instructions that include opening Powershell, a legitimate Windows admin tool, and pasting in commands.

Security researchers at ReversingLabs say they have uncovered two active campaigns that use these short videos to trick users.

Those fooled could find that dangerous PowerShell commands are run, or they are taken to malicious download sites, which then install nasty malware called Vidar. This is an infostealer designed to pinch sensitive information from infected devices.

Speaking about this latest type of attack, the security experts at Malwarebytes said: "We’ve already seen attackers move away from traditional phishing emails and toward tactics that trick people into installing malware themselves.

"Now they’re being lured with slick social media videos that promise free Spotify Premium, free Windows activation, or free Microsoft Office, but instead leave people with infostealers on their Windows devices."

In a bid to help users stay protected, Malwarebytes has issued some important advice.

This includes only downloading software from official vendor websites and never instantly trusting a site that asks you to run commands on your device or copy and paste code.

Many ClickFix pages also use countdowns, fake user counters, or other pressure tactics to make you act quickly so be wary if anything like that pops up on the screen.

Finally, check that the downloaded files match what you expected to download.