Alert: Fake Windows 11 download page installs malware on your PC
Don't download Windows 11 from this site
Here at Tom’s Guide our expert editors are committed to bringing you the best news, reviews and guides to help you stay informed and ahead of the curve!
You are now subscribed
Your newsletter sign-up was successful
Want to add more newsletters?
Daily (Mon-Sun)
Tom's Guide Daily
Sign up to get the latest updates on all of your favorite content! From cutting-edge tech news and the hottest streaming buzz to unbeatable deals on the best products and in-depth reviews, we’ve got you covered.
Weekly on Thursday
Tom's AI Guide
Be AI savvy with your weekly newsletter summing up all the biggest AI news you need to know. Plus, analysis from our AI editor and tips on how to use the latest AI tools!
Weekly on Friday
Tom's iGuide
Unlock the vast world of Apple news straight to your inbox. With coverage on everything from exciting product launches to essential software updates, this is your go-to source for the latest updates on all the best Apple content.
Weekly on Monday
Tom's Streaming Guide
Our weekly newsletter is expertly crafted to immerse you in the world of streaming. Stay updated on the latest releases and our top recommendations across your favorite streaming platforms.
Join the club
Get full access to premium articles, exclusive features and a growing list of member rewards.
Hackers are using a fake Windows 11 download page to get malware onto unsuspecting users’ computers. If downloaded, said malware will steal browser data, cryptocurrency wallets and more. This campaign is targeted at folks whose PCs fail to meet Microsoft’s stringent Windows 11 hardware requirements.
As Bleeping Computer (via TechRadar) reports, the fake Windows 11 download page has official Microsoft logos, favicons and a “Download Now” button. It looks legitimate at first glance, but the URL (which we won’t post here) reveals the site as fraudulent. If you click on the download button, you’ll get an ISO file that contains the malware. Threat researchers at CloudSEK shared a technical report detailing how the malware works with Bleeping Computer.
The malware in question, known as “Inno Stealer,” can bypass Windows Defender anti-virus and uninstall security applications. Once on your PC, Inno Stealer steals data from browsers like Chrome and Edge, and data from cryptocurrency wallets. The stolen data then gets sent to the people who originally created the malware.
While this piece of malware is certainly dangerous, it’s easily avoidable. As we said, the URL is a dead giveaway that the download page isn’t a genuine Microsoft page. If you’re currently running Windows 10 and have a PC that can run Windows 11, you can download and install Microsoft’s latest operating system directly from Windows Upgrade on your computer. You can also go to Microsoft’s website to download Windows 11.
Things get a bit complicated if your PC doesn’t meet Microsoft’s requirements for Windows 11, particularly the TPM 2.0 check. While there are ways to circumvent this, we don’t recommend it since installing Windows 11 on unsupported hardware will prevent you from getting the latest security updates.
If your computer doesn’t meet Microsoft’s requirements, it’s best to wait until you’ve either upgraded your current PC or have bought a Windows 11-ready machine. As we said in our Windows 11 review, the operating system is solid but not revolutionary. There’s no urgency in getting Windows 11, especially if it means putting your computer at risk.
Get instant access to breaking news, the hottest reviews, great deals and helpful tips.

Tony is a computing writer at Tom’s Guide covering laptops, tablets, Windows, and iOS. During his off-hours, Tony enjoys reading comic books, playing video games, reading speculative fiction novels, and spending too much time on X/Twitter. His non-nerdy pursuits involve attending Hard Rock/Heavy Metal concerts and going to NYC bars with friends and colleagues. His work has appeared in publications such as Laptop Mag, PC Mag, and various independent gaming sites.
