Cybercriminals are taking advantage of the final phase of the Windows 11 upgrade announced on Jan. 26 by installing RedLine Stealer malware for those who download a fake installer. The malicious actor registered the domain “windows-upgraded.com,” which they then used to spread malware by tricking users into downloading and running the fake installer, researchers say. Researchers found a folder with a total size of 753 MB, in which the executable file named Windows11InstallationAssistant.exe was the largest, at 751 MB.”]
Source: https://www.cuinfosecurity.com/fake-windows-11-upgrade-installers-add-redline-malware-a-18491