Microsoft's threat researchers have uncovered a campaign aimed at people searching for cracked versions of paid software, free games, "activators", plugins and unofficial utilities. The downloads look like normal installers, but in the background they install several extra programs at once, usually without the person realizing it.
Microsoft saw three kinds of hidden extras. Some route other people's internet traffic through the infected computer. Some enroll the computer in a distributed-computing network that uses its processing power. Others install adware-style "system utility" programs. One of them also sets itself to start automatically every time the computer runs.
Some of these programs have legitimate uses on their own, but Microsoft warns that installing them silently, without informed consent, creates real security and privacy risks. For a business, a computer quietly relaying strangers' internet traffic is a serious problem, and every unknown program is one more thing that can be abused.
Examples of the bait included cracked audio plugins, database tools, PC games, auto-clickers, and driver or phone-unlock tools. Microsoft's main advice for organizations is to block untrusted software sources, turn on protection against potentially unwanted programs, and watch for unexpected new software.
What you should do
- Make a simple rule for your team: only install software from the vendor's official website or an approved app store, and never use cracked or "free" versions of paid programs.
- Remove local administrator rights from everyday user accounts so staff can't install programs without IT approval.
- Turn on potentially unwanted app (PUA) blocking in Microsoft Defender or your antivirus.
- Review the installed programs on office computers and remove anything nobody recognizes.
- Ask your IT provider to set up alerts for new software installations on business devices.
Computech prepares these summaries with AI assistance, based on public news reports. See the original report for full details.
