{
  "name": "This fake Windows support website delivers password-stealing malware",
  "slug": "this-fake-windows-support-website-delivers-password-stealing-malware",
  "description": "A malicious campaign is targeting French-speaking users in an attempt to steal passwords, payment details and banking details from people across France, according to researchers at the Institute for Strategic Studies (ISS).",
  "published": "2026-04-09T17:48:01.612000+00:00",
  "created_at": "2026-04-09T18:05:53.791000+00:00",
  "modified_at": "2026-04-09T16:05:53+00:00",
  "created_at_opencti": "2026-04-09T18:05:53.791000+00:00",
  "author": "AlienVault",
  "confidence": 100,
  "report_types": [
    "threat-report"
  ],
  "labels": [
    "electron",
    "france",
    "indonesia",
    "javascript",
    "kela",
    "microsoft",
    "python",
    "windows update"
  ],
  "tags": [
    "2026-04-09",
    "electron",
    "france",
    "indonesia",
    "javascript",
    "kela",
    "microsoft",
    "python",
    "windows update"
  ],
  "related_entities": {
    "indicators": [
      {
        "id": "1e3414e6-2bd7-4c47-a17f-5b2e5b9c3924",
        "name": "microsoft-update.support"
      },
      {
        "id": "a699f867-e9b9-449a-9978-9eeff3ebc100",
        "name": "13c97012b0df84e6491c1d8c4c5dc85f35ab110d067c05ea503a75488d63be60"
      },
      {
        "id": "df364d46-4d06-4f83-9a87-4c38dd929463",
        "name": "c94de13f548ce39911a1c55a5e0f43cddd681deb5a5a9c4de8a0dfe5b082f650"
      }
    ],
    "attack_patterns": [
      {
        "id": "926a888c-190c-4efb-ab6b-f9d7e6a0fc54",
        "name": "T1547"
      },
      {
        "id": "7d7ac733-6442-416f-8669-c302dd0843b9",
        "name": "T1036"
      },
      {
        "id": "0c836307-129e-4ff7-a532-180c633cacba",
        "name": "T1027"
      },
      {
        "id": "cbd87c8c-3bed-461a-acef-56ffc8b87571",
        "name": "T1105"
      },
      {
        "id": "9b6064e6-a05b-4e95-baf5-34d180bc9221",
        "name": "T1059"
      },
      {
        "id": "0156fcda-e385-4662-b388-086c3e16feec",
        "name": "T1140"
      }
    ],
    "observables": [
      {
        "id": "9221576c-f106-4572-b546-ab3ad9d1e379",
        "name": "microsoft-update.support"
      },
      {
        "id": "",
        "name": "13c97012b0df84e6491c1d8c4c5dc85f35ab110d067c05ea503a75488d63be60"
      },
      {
        "id": "",
        "name": "c94de13f548ce39911a1c55a5e0f43cddd681deb5a5a9c4de8a0dfe5b082f650"
      }
    ],
    "others": [
      {
        "id": "",
        "name": "Brazil"
      },
      {
        "id": "",
        "name": "India"
      },
      {
        "id": "",
        "name": "United Kingdom of Great Britain and Northern Ireland"
      },
      {
        "id": "",
        "name": "Spain"
      },
      {
        "id": "",
        "name": "France"
      },
      {
        "id": "",
        "name": "Indonesia"
      },
      {
        "id": "",
        "name": "microsoft-update.support"
      }
    ]
  },
  "external_refs": [
    {
      "id": "8dbec7b4-c629-4002-afb5-987465eabeeb",
      "standard_id": "external-reference--7ef58a90-306f-5246-af45-371779b6a591",
      "entity_type": "External-Reference",
      "source_name": "AlienVault",
      "description": null,
      "url": "https://otx.alienvault.com/pulse/69d7e6529f5d17df9f58fdae",
      "hash": null,
      "external_id": "69d7e6529f5d17df9f58fdae",
      "created": "2026-04-09T18:05:53.694Z",
      "modified": "2026-04-09T18:05:53.694Z",
      "createdById": null
    },
    {
      "id": "f8832845-097d-44fd-973f-7e6756114c57",
      "standard_id": "external-reference--8668ff36-9529-56b4-b6a1-9701f6c4c244",
      "entity_type": "External-Reference",
      "source_name": "AlienVault",
      "description": null,
      "url": "https://securityboulevard.com/2026/04/this-fake-windows-support-website-delivers-password-stealing-malware/",
      "hash": null,
      "external_id": null,
      "created": "2026-04-09T18:05:53.724Z",
      "modified": "2026-04-09T18:05:53.724Z",
      "createdById": null
    }
  ]
}