‘Do Not Download’—Update Warning Issued For Microsoft Windows Users

Millions of Windows users are now at risk. Microsoft has pulled the plug on Windows 10 security updates and hackers are inevitably preparing their attacks. This month is the first which will see potentially hundreds of millions of unsecured PCs. October’s update was the last generally available. But now users have something new to worry about.

I’ve reported before on the Flyby11 workaround to install Windows 11 on incompatible PCs, that has now made a comeback as FlyOOBE. This is available again on Github. But there’s a new threat for any users looking to download the popular bypass tool. 

While bypasses carry risk anyway — for example, invalidating warranties and potentially diluting down hardware-based security protection, sometimes the threat is even more acute. And so it is with a new “security notice” from FlyOOBE’s developer: “Do not download FlyOOBE from flyoobe.net!!!

The developer behind the now renamed FlyOOBE promises users that by running the tool "you’ll be running Windows 11 on your ‘unsupported’ machine in no time.

Think of it as sneaking through the back door without anyone noticing."

This works by using the Windows Server installation option which “skips TPM, Secure Boot, CPU checks” and “still installs normal Windows 11.” This tool “automatically” manages the ISO download and mount and “matches Microsoft’s own documented workaround for upgrading unsupported devices.”

Even so, as I’ve suggested before, all such bypasses are intended for fairly green-fingered users. Everyday Windows users should upgrade to Windows 11 if they have an eligible PC or enrol in the ESU or buy a new PC if they don’t. It’s not certain that any bypass will secure a PC, given the tight linkage between Windows 11 software and the mandatory hardware, including the now infamous TPM 2.0.

FlyOOBE’s developer actually warns those using the tool will “likely (get) no automatic major version upgrades, future updates may fail if new hardware features are required, (and) Microsoft could block updates anytime.”

But worse, it now seems that an enterprising attacker is hijacking Windows 10 deadline concern amongst millions of users to push out a malware-laced download or one that could potentially open a backdoor onto your PC. Keep in mind, that sustem-level tools like this have unusually privileged access to your PC which can be used to do harm.

If you want to download FlyOOBE, make sure you go to the developer’s page.

Source