Malwarebytes identifies 41 deceptive software download sites

Researchers from Malwarebytes have identified a network of 41 deceptive websites designed to trick users into installing Download Studio instead of the intended software. These sites masquerade as legitimate download hubs for popular games and Windows programs, including titles such as Counter-Strike, Roblox, The Witcher, and PUBG, as well as utilities like VLC and 7-Zip.

The campaign utilizes a sophisticated technique where the websites display accurate program information, legitimate developer names, and valid digital signatures to appear trustworthy. Some sites even show legitimate download addresses, such as the Steam store, when a user hovers over a button. However, JavaScript intercepts the click to redirect the user via an affiliate link to the unwanted software.

One identified site even falsely offered a PC version of Grand Theft Auto VI, despite the game currently being announced only for PlayStation 5 and other consoles.