Think twice before downloading your next Windows 11 app from Google

Researchers found more than 70 fake download domains impersonating popular Windows apps and surfacing in Google results.

The sites used deceptive routing to attract users, and some actually delivered malware.

Confirmed payloads included RemusStealer and trojanized installers targeting apps such as Lively Wallpaper and SignalRGB.

The campaign could expose browser data, password managers, and cryptocurrency wallets to theft.