Fake Software Installers Disable Windows Update and Weaken Defender Protections

Fake software installers are being used to disable Windows Update functionality and weaken Windows Defender protections on compromised systems. The malicious installers masquerade as legitimate software to trick users into executing them. Once installed, these fake installers modify system settings to turn off automatic Windows updates, leaving systems vulnerable to known security flaws. The attack represents a method for threat actors to maintain persistence and prevent security patches from being applied to infected machines.