Be aware of Windows 10 ransomware emails

With Microsoft’s release of their latest operating system, Windows 10, the security industry have been on tenterhooks awaiting the surge of Windows 10 related scams to begin hitting the Internet.

And that they have, with a large email spamming campaign hitting inboxes across the world appearing to come from Microsoft informing the recipient that they are ready for them to download their latest product, Windows 10.

The email – which mimics a legitimate email being sent out to users – has been cleverly spoofed to appear to come from a legitimate Microsoft email address – update@microsoft.com – and comes with a file attachment which the email asserts is the Windows installer program.

But the email is not from Microsoft; rather it originated from somewhere in Thailand. And the attachment is no Windows installer, rather another case of ransomware, in this case called CTB-Locker.

Sponsored Content. Continued below...

Remember ransomware? That’s the malware that locks you out of your computer until you pay a ransom. And just like Cryptolocker, it encrypts the data on the hard drive, so there really is no way of getting it back until you pay up.

Users who receive the email and believe it is a genuine email from Microsoft and execute the email attachment will result in installing this strain of ransomware on their computers, and losing their important files, unless they’re willing to pay the money to the criminals who orchestrated the scam.

This is the screen you’ll likely see if you fall for the scam.

Whilst the email may have started fooling victims, there are the tell-tale signs that it is actually a spoof email. For one the email contains several minor spelling mistakes and they do not address the recipient by name.

If you want Windows 10, don’t go installing email attachments. The update can be found on the actual Microsoft website.

And remember to have reliable up-to-date antivirus installed on your computer at all times. Our editor’s choice software is already updated to detect and remove known CTB-Locker ransomware strains.