Inno Stealer Spreads via Fake Windows 11 Updates

Inno Stealer is a piece of malware, which is being distributed with the help of fake downloads. The malicious package is concealed as an upgrade kit for Windows 11. However, instead of an operating system upgrade, the victim would be receiving a copy of the Inno Stealer. This malware is able to hijack information from Web browsers, as well as cryptocurrency wallets. The fake Windows 11 packages are hosted on fake Web pages, which are being promoted through the use of dodgy ads and pop-ups, or other misleading content.

We assure you that Microsoft have not released the next version of Windows for public testing, and even if they had done so, you would not be able to download it from random websites. Once victims try running the fake Windows 11 update utility, they will unknowingly deploy the Inno Stealer onto their computer.

Once active, the Inno Stealer will work in the background to collect data related to Web browsers and cryptocurrency wallets, and then exfiltrate it. The criminals would be getting access to login credentials, chats, browsing history, and more. Another Inno Stealer feature is the ability to steal clipboard data, as well as to fetch information about the directory data of specific folders.

To stay safe from such attacks, we recommend using an up-to-date anti-malware tool at all times, and being more careful with the types of content you interact with online.