This week, Microsoft shut down the default for a web-based app installer protocol after it detected that it was being used by cybercriminals to make people install malicious software.
Many of Microsoft’s team members are still on an extended holiday break, which meant that for the past couple of weeks, we didn’t get any updates for Windows 11, or any new builds from the Windows Insider Program. However, the Microsoft Security Response Center is still up and running, even during the holidays. This week, the MSRC took measures to shut down a protocol that was being used by cybercriminals to try and get people to install malicious apps from websites.
In a blog post, the MSRC stated that it had found evidence that the ms-appinstaller URI scheme was the subject of malicious activity.
