New fake versions of Chrome and Windows
Cybercriminals have found in the fake updates a way to infect victims’ devices. They mainly use programs or services that are widely used. This time it was Google Chrome and Windows. What they do is sneak HavanaCrypt, a dangerous ransomware, as if it were really a new version.
security researchers from TrendMicro have recently detected this problem. What attackers are looking for is to encrypt files and steal data, just like any version of ransomware. In this way they could ask for a bank ransom in exchange for releasing those files and making them available again.
HavanaCrypt it has the ability to detect that the system is not running in a virtual environment. If it detects it, it stops the process. Furthermore, it is capable of stopping different processes in Windows and even has commands to configure Windows Defender and detect threats.
The next thing HavanaCrypt does is delete backups and functions to be able to restore data. In addition, it is responsible for stealing information, collecting system data, such as the type of processor it uses.
Keep in mind that this is not new, since in May, without going any further, there was also a similar threat. It was Magniber, another ransomware that was disguised as updates for Windows 10.
How to avoid these attacks
So what can we do to safely install updates and avoid ransomware and other threats? The main thing in these cases is to install the new versions only from official sources. It doesn’t matter if it’s Windows, Chrome or any other software you use.
You have to go to the official page or use legitimate channels. For example, in the case of Windows you can update from the system itself. To do this you can go to Start, enter Settings and go to Windows Update. It will automatically start looking for new versions. The same goes for Google Chrome or any browser, which you can install directly from the application.
Avoid downloading so-called updates from third-party sites or files you find while browsing the web. In that case you are going to run the risk of installing software that could have been maliciously modified. This is something that attackers will take advantage of whenever they can.
In short, installing updates is very important to make systems work well. You must keep this in mind at all times, but always download the software from legitimate sources and do not run any kind of risk that may allow the entry of malicious software. Keeping everything updated is important for the equipment to work well.
