Fake Windows warnings, served through ads on real websites, tell people to call a scam number. The same kit reached users at 80 organizations since March.
A scam that looks like a Windows security alert has been showing up after people click ads on ordinary websites. The page claims your computer has a problem and tells you to call a phone number. That number leads to scammers. Researchers say the same fake Microsoft support kit reached users at 80 organizations between March and October 2026.
The trick starts with an ad on a real website. Click it, and you land on a page hosted on Microsoft Azure, which is Microsoft's cloud service. The page shows alarming messages such as "System Error" and "Windows Firewall" warnings, plus a fake support chat. Every part of it points you toward a toll-free number.
Security firm PIXM found the kit and published its findings on November 2. New scam pages were still appearing daily as of that date, so the operation was active.
The pages sit on Microsoft's cloud, but that does not make them real. Scammers rent space there like anyone else. The ads also ran on well-known sites, including MSN, Us Weekly and Whitepages. PIXM said those sites were not in on it. The ads came through automated ad exchanges, and reviewers may not have seen the same page that targeted visitors saw.
The 80 organizations were exposed to the scam pages. That is not 80 confirmed break-ins. PIXM also said the specific back end it studied accounted for 11 of those organizations. Other operations used the same fake page across the rest.
This is a browser scam, not a confirmed virus infection. The harm comes after you call. Scammers often talk people into installing remote-access software, which lets someone control your computer from afar. They may also charge for repairs you do not need, or move on to refund and bank-impersonation tricks.
If you saw such a page and closed it without calling, you did what you should. Nothing in the material says that simply seeing the page infects a computer.
The steps in the alert box above cover what to do, including advice for businesses.
PIXM saw clues pointing to Mandarin-speaking developers, such as Chinese text in the code. It stressed that registration records alone cannot prove who is behind this. Who runs the scam calls is not established.
A browser warning that tells you to call a number is always a scam, so close the tab and do not call.
The Attala County Sheriff's Office in Mississippi says scam calls are reaching residents, and a call that sounds official may not be.
Read more: Mississippi sheriff warns residents about scam phone callsScammers are posing as Texas sheriff's officers and claiming you missed jury duty. Caller ID can show a real police number even when the call is fake.
Read more: Fake jury duty calls spoof a real Texas sheriff's phone numberFake PayPal emails and texts, some posing as a security report, try to get you to tap a link and type your login. Checking your account directly avoids the trap.
Read more: Got a fake PayPal message? Skip its link and check your account yourself
