Threat actors have started distributing fake Windows 11 upgrade installers to Windows 10 users. They tricked them into downloading and executing RedLine stealer malware. The timing of the attacks coincides with the announcement of Windows 11’s broad deployment phase. The actors used the seemingly legitimate windows-upgraded.com domain for the malware distribution part of their campaign. The site appears like a genuine Microsoft site and, if the visitor clicked on the Download Now button, they received a 1.5 MB ZIP archive.”]