Skip to content
ThreatCluster

Fraudulent Microsoft Scans Target Users to Remove Antivirus Software

First seen 26 Aug 2026, 01:52 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •August 26, 2026 at 23:35 UTC
  • •Fraudulent sites impersonate Microsoft to push fake security scans.
  • •Victims are pressured to uninstall antivirus software and disclose personal information.
  • •The scam exploits urgency by falsely claiming antivirus products are unsupported.

A cluster of fraudulent websites impersonating Microsoft is conducting scams that pressure victims into uninstalling their antivirus software. These sites, branded as SysScan, claim to perform security scans that falsely indicate serious issues with the user's antivirus products. Victims are coerced into disclosing personal and banking information and granting remote access to their computers. The scam exploits the urgency of perceived security failures, misleading users into believing their antivirus is unsupported by Windows. This fraudulent activity primarily targets individuals using third-party antivirus solutions. The current status indicates ongoing activity, with no reported takedowns of the fraudulent sites as of the articles' publication date.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 46d ago How this analysis works

Timeline

2026-08-25
Scam websites identified
Fraudulent sites branded as SysScan are reported to be targeting users with fake security scans.
Gbhackers
2026-08-25
Scam tactics detailed
Reports indicate that the scams pressure users into uninstalling antivirus software by claiming serious security failures.
Cybersecuritynews

More articles in this cluster (2)