Fake Microsoft Security Scans Trick Victims into Uninstalling Antivirus Software

A wave of fake Microsoft-branded security scan websites has been tricking victims into uninstalling their antivirus software, according to Malwarebytes.

The sites, which claim to be called SysScan, convince users that their computer has serious problems due to the installed antivirus software. However, this is a lie, and the ultimate goal is to get victims onto the phone to remove their security software and hand over personal and banking information for a supposed refund.

The sites collect user data, including names, addresses, phone numbers, email addresses, bank details, and remote-access tool information. This information is then sent directly to Telegram's bot API, making it easy for the scammers to abandon the site when it attracts attention.

The scam relies on convincing-looking but fake security scans that claim to check for malware, memory issues, or missing security patches. However, these claims are false, and the sites only read basic browser data such as operating system, screen size, and location.