A recent cyber campaign has been identified that utilizes a fraudulent Microsoft support website to distribute password-stealing malware, specifically targeting French-speaking users. The attack begins at a typosquatted domain, http://microsoft-update.support, which mimics a legitimate Microsoft support page. This site promotes a fake cumulative update for Windows version 24H2, complete with misleading documentation designed to convince users to download what appears to be a standard Windows update.