🚨 Fake Microsoft Security Scans Tell Victims to Uninstall Antivirus

VERIFIED EMERGING SCAM ALERT — Report date: August 24, 2026 | Scam type: Tech-support / refund scam / remote-access fraud

What’s happening

Malwarebytes researchers identified a network of 11 fake Microsoft-branded ‘SysScan’ websites designed to convince visitors that their computers have serious security problems. The sites falsely claim Windows no longer supports third-party antivirus software and instruct victims to uninstall their legitimate security protection.

How the scam works

The fraudulent sites display a convincing-looking browser-based security scan. They read basic information a browser can legitimately expose, such as operating-system and screen details, but combine it with fabricated security findings. Malwarebytes found that the score is deliberately constrained to between 13 and 30 out of 100, so a passing result is impossible.

After alarming the victim, the site tells them to remove their antivirus software. It then moves into a supposed refund process that can collect names, addresses, phone numbers, banking information, cryptocurrency usernames, antivirus details, and credentials for remote-access software. Malwarebytes reported that submitted information was sent through Telegram’s bot API.

Warning signs

Be suspicious when a website claims it can deeply scan your computer from a browser, every scan reports serious problems, you are told Microsoft no longer supports your antivirus, you are instructed to uninstall security software, someone asks you to install remote-access software, or a supposed refund requires banking or cryptocurrency information. A Microsoft logo does not prove Microsoft operates the website.

What consumers should do

Close the page immediately. Do not uninstall your antivirus and do not grant remote access to your computer. If you already allowed remote access, disconnect the computer from the internet, remove the remote-access software, reinstall or enable your security software, run a full security scan, change important passwords from a trusted device, and contact your bank immediately if financial information was exposed.

AigiShield takeaway

A webpage cannot perform the kind of deep computer-security inspection these sites claim to provide. Never weaken your computer’s security because an unsolicited website tells you to.

Source

Malwarebytes Threat Intelligence, August 24, 2026: Fake Microsoft security scans trick victims into uninstalling their antivirus. https://www.malwarebytes.com/blog/threat-intel/2026/08/fake-microsoft-security-scans-trick-victims-into-uninstalling-their-antivirus

Think it might be a scam?

Let AigiShield check it out for you. Think Before You Click. Verify Before You Trust.