Windows 10 upgrade scam

In what appears to be a legitimate email from Microsoft ( the email entices the user to download the latest version of Windows 10 from a link from within the email.

In the event that the file is downloaded the user’s computer will run a malicious executable file (CBT-Locker), a type of ransomware which locks the infected computer prompting the user to pay to unlock their computer.

The following link will take you to an article with more information:

The NCSC advises using SPF record checking as part of your anti-spam filter software (see section 15.2.15 of the NZISM) to prevent emails like this coming through.

For any further assistance contact the NCSC at