Friday 6 November
Global

Your region, kept on this device.

Advanced Windows Manager

Product

Am I affected?

Checked against NVD affected-version data on our server. Nothing you type is stored.

Security timeline

  1. Malware reported by Cyber Security NewsMicrosoft warns fake game and cracked software installers secretly monetise Windows PCs
  2. Malware reported by Cyber Security NewsFake software downloads secretly enlist Windows PCs in bandwidth sharing and computing schemes
  3. Malware reported by Microsoft Security BlogFake download campaign uses trojanised installers to push monetisation software

Recent news

Cyber Security News·

Microsoft warns fake game and cracked software installers secretly monetise Windows PCs

Threat Intelligence reports a campaign using deceptive installers for games, cracked applications and utilities to deliver , CharityEngine with BOINC, and Advanced Windows Manager. WorldProxyPool shares the victim's bandwidth, while the computing branch uses the machine's resources, although cryptomining was not established. The installers use unattended options to reduce prompts, leaving unwanted software and background activity that can outlast the original download.

Cyber Security News·

Fake software downloads secretly enlist Windows PCs in bandwidth sharing and computing schemes

researchers documented a campaign where fake installers for cracked software, games and plugins drop multiple payloads in one session. The branches install proxyware, CharityEngine and BOINC computing components, and utilities, with WorldProxyPool creating SYSTEM-level scheduled tasks for persistence.

Microsoft Security Blog·

Fake download campaign uses trojanised installers to push monetisation software

Microsoft Threat Intelligence has tracked a campaign that uses trojanised Inno Setup-style installers, distributed as fake downloads for cracked software, games, activators and utilities. A single installation can silently deploy several monetisation payloads, including proxy-network software, compute-sharing software and adware-style utilities. also creates recurring SYSTEM scheduled tasks for persistence.

Last updated 6 November 2026. Facts come from our own stories, NVD and CISA KEV, MITRE ATT&CK and Wikidata, each named beside the fact; the introduction, when there is one, is from Wikipedia. We never show company logos.

Report a mistake