Executive Summary

A malware campaign uses fake software‑download sites that impersonate trusted vendors to deliver malicious installers. The installers disable Windows Update and weaken Microsoft Defender, compromising users seeking popular software. The attack has affected multiple organizations, especially China‑based operations of multinational companies and Chinese‑speaking users.

---

Intelligence Metadata - Source Publisher: The Hacker News - Published Date: 2026-09-02T16:41:06+00:00 - Category: threat-intel

Original Description: An active malware campaign is using bogus software-download websites to impersonate trusted vendors and distribute malicious installers. "The campaign has targeted users looking to download popular software and has resulted in compromises across multiple organizations and industries, primarily affecting China-based operations of multinational organizations and Chinese-speaking users," Microsoft

"The greatest danger for most of us is not that our aim is too high and we miss it, but that it is too low and we reach it."

— Michelangelo