Technology

Fake Google Meet update lets hackers control your Windows PCs

Published

6 hours ago

March 31, 2026

Fake Google Meet update lets hackers control your Windows PCs

NEWYou can now listen to Fox News articles!

You might think the biggest danger online is downloading a virus or giving away your password. But a new phishing trick shows how attackers can take control of your computer without either of those things happening.

Security researchers recently uncovered a fake Google Meet update page that looks convincing enough to fool many people. All it takes is one click on a button that says “Update now.” Instead of installing an update, you can be tricked into enrolling your Windows computer in a remote management system controlled by attackers.

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.

TECH GIANTS UNITE TO FIGHT ONLINE SCAMS

A fake Google Meet update page can trick Windows users into handing attackers remote control of their computers through a built-in device enrollment feature. (pocketlight/Getty Images)

All you need to know about the fake Google Meet update

Researchers at Malwarebytes, a cybersecurity company that develops software to detect and remove malware, discovered a phishing website designed to look like an official update notice for Google Meet. The page tells visitors they need to install the latest version of Meet to continue using the service. The design uses familiar colors and branding that many of us associate with Google products.

When someone clicks the “Update now” button, it does not download an update at all. Instead, it triggers a built-in Windows feature using a special device enrollment link that opens a real system window called “Set up a work or school account.” This window normally appears when a company’s IT department sets up a laptop for an employee.

In this scam, the setup window is already filled with information that connects the computer to a remote management server controlled by the attacker. The system points to an online management service hosted on Esper, which is a legitimate platform used by businesses to manage company devices.

If the victim clicks through the setup process, his computer becomes enrolled in what is called a mobile device management system. That gives whoever controls the server the same level of control a company’s IT department would have over a work laptop.

Security researchers say the attackers are not expecting everyone to complete the process. Even if only a small number of people click through the prompts, that can still give them access to enough computers to make the campaign worthwhile.

How it works and why it matters to you

This attack works by abusing a legitimate Windows feature rather than installing malware. Windows includes something called device enrollment, which lets companies connect employee computers to a management system. Once a device is enrolled, administrators can remotely control many aspects of that machine.

In a normal workplace setting, this helps IT teams install company software, enforce security settings and manage devices. Attackers realized they could trick people into joining their own management system instead. When you click the fake update button, Windows launches a built-in enrollment process. Because it is a real system feature and not a fake pop-up, it looks legitimate and can bypass many security warnings.

If you complete the steps, the attacker effectively becomes the administrator of your computer. That could allow the hacker to silently install software, change system settings, view files stored on your computer, lock your screen or even wipe the device entirely. In some cases, the hacker could also install additional malware later. What makes this attack especially tricky is that traditional antivirus tools may not detect anything wrong because the operating system itself is performing the actions.

We reached out to Google for comment, and a spokesperson provided the following statement: “These ‘update now’ prompts are not legitimate Google communications. This is a phishing campaign that attempts to trick users into a Windows device enrollment process. Google Meet updates are handled automatically through your browser or the official app. Google will never prompt you to visit a third-party site to enroll a personal device to receive an update.”

FAKE GOOGLE SECURITY PAGE CAN TURN YOUR BROWSER INTO A SPYING TOOL

Instead of downloading malware, victims who click through a fake update page may unknowingly give attackers administrator-level access to their Windows devices. (Beata Zawrzel/NurPhoto via Getty Images)

7 ways to protect yourself from the fake Google Meet update

If you ever see a message saying you must update a service before continuing, slow down and verify it first. A few simple habits can prevent attacks like this from working.

1) Be skeptical of unexpected update prompts

If a website suddenly tells you that a service like Google Meet needs an update before you can continue, pause for a moment. Major platforms rarely force updates through random web pages. Google Meet updates happen automatically through your browser or official app and never require visiting a third-party site. Always check the URL bar. Legitimate Google Meet sessions only run on meet.google.com. A real update will never try to enroll your entire computer or trigger system-level setup screens. If it does, it is a scam. Instead, open the service directly from its official website or app and check for updates there.

2) Check if your device was enrolled without your knowledge

On a Windows computer, open Settings, then go to Accounts and look for “Access work or school.” If you see an unfamiliar account or organization listed, especially one you do not recognize, disconnect it immediately. This section shows whether your device has been enrolled in a remote management system.

3) Reduce your exposure with a data removal service

Cybercriminals often rely on personal information found online to make phishing attacks more convincing. Data removal services help remove your information from data broker sites, reducing the chances that scammers can target you with personalized attacks. While it will not stop this specific trick, it can make you a harder target overall. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.

4) Use strong antivirus software

Google says Gmail’s AI protections block more than 99.9% of spam, phishing and malware, but scams can still reach you through search results, ads or links shared outside your inbox. That’s why using strong antivirus software with real-time protection can help detect suspicious behavior that may emerge after an attacker gains control of a device. Even though this attack uses legitimate Windows features, security tools can still identify unusual system changes or malicious software installed afterward. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android and iOS devices at Cyberguy.com.

DARKSWORD LEAK PUTS MILLIONS OF IPHONE USERS AT RISK

Security researchers uncovered a phishing scam that uses a fake Google Meet update prompt to enroll personal computers into attacker-controlled remote management systems. (400tmax/Getty Images)

5) Keep Windows and your browser updated

Software updates often include security protections that help block new attack methods. Running the latest version of Windows and your web browser reduces the chances of attackers exploiting older system behaviors or vulnerabilities.

6) Use a password manager

A password manager only autofills your login details at the correct website address. If you land on a phishing page pretending to be a service like Google Meet, your password manager will not fill in your information. That warning alone can help you realize something is wrong before you click anything. It also encourages you to rely on saved logins instead of interacting with suspicious update prompts. Check out the best expert-reviewed password managers of 2026 at Cyberguy.com.

7) Never complete system setup prompts you didn’t start

If a Windows system window suddenly appears asking you to set up a work or school account, stop immediately. Legitimate setup prompts typically appear when you are configuring a device or following instructions from your employer, not from clicking a random website. If you did not expect it, close the window.

Kurt’s key takeaway

Cybercrime is changing by the minute. Instead of writing obvious viruses, attackers are increasingly abusing legitimate features built into operating systems and cloud services. In this case, both Windows device enrollment and the management platform being used are real tools designed for businesses. The attackers simply redirected those tools toward people who never intended to hand over control of their computers. That should tell you how easily powerful enterprise features can be repurposed for attacks when there are few safeguards preventing misuse.

Should operating systems block device enrollment requests that come from random websites? Let us know by writing to us at Cyberguy.com.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Kurt “CyberGuy” Knutsson is an award-winning tech journalist who has a deep love of technology, gear and gadgets that make life better with his contributions for Fox News & FOX Business beginning mornings on “FOX & Friends.” Got a tech question? Get Kurt’s free CyberGuy Newsletter, share your voice, a story idea or comment at CyberGuy.com.

Related Topics:cybercrime Featured Google Hackers Tech windows os

Click to comment

Technology

You can now use ChatGPT with Apple’s CarPlay

Published

6 hours ago

March 31, 2026

Press Room

You can now use ChatGPT with Apple’s CarPlay

ChatGPT is now accessible from your CarPlay dashboard if you have iOS 26.4 or newer and the latest version of the ChatGPT app, 9to5Mac reports. Apple’s recently-launched iOS 26.4 update added support for “voice-based conversational apps” in CarPlay, opening the door to let you use AI chatbots with voice features through Apple’s in-car platform.

When using ChatGPT through CarPlay, the app doesn’t show text conversations, according to 9to5Mac — instead, you can only have conversations with the app using your voice. (Apple’s developer guidelines ask that apps don’t show text or imagery as responses.) The CarPlay app isn’t completely devoid of text, though, as there’s onscreen buttons to mute and end the conversation.

You can also look at a list of recent conversations you’ve had with ChatGPT, according to MacRumors. But you can’t use a wake word to use ChatGPT through CarPlay — you’ll have to tap on the app to open it up.

Technology

Another Starlink satellite has inexplicably exploded

Published

18 hours ago

March 31, 2026

Press Room

Another Starlink satellite has inexplicably exploded

SpaceX says it lost contact with a Starlink satellite after suffering an “anomaly.” SpaceX isn’t saying exactly what happened, but space-tracking company Leo Labs says it “immediately detected tens of objects in the vicinity” of Starlink 34343 after the event.

“Latest analysis shows the event poses no new risk to the @Space_Station, its crew, or to the upcoming launch of NASA’s Artemis II mission,” says SpaceX in a message posted to X. “We will continue to monitor the satellite along with any trackable debris and coordinate with @NASA and the @USSpaceForce.”

The satellite and fragments are expected to burn up in the atmosphere within a few weeks. SpaceX says it is working to determine the root cause.

The latest mishap occurred at about 560km above the Earth, an increasingly crowded area known as low Earth orbit where over 24,000 objects, including debris and about 10,000 Starlink satellites, are currently being tracked.

In January, SpaceX requested approval from the FCC for “up to one million satellites” to create orbital data centers. “We just recently gave a request for FCC licensing of up to a million AI satellites,” said SpaceX president and chief operating officer Gwynne Shotwell in a recent Time profile. “I’m surprised that didn’t get more news. I thought for sure that would get a lot of news.”

Technology

Tech giants unite to fight online scams

Published

18 hours ago

March 31, 2026

Press Room

NEWYou can now listen to Fox News articles!

If you’ve ever gotten a suspicious text, a fake delivery alert or a message that felt just a little too convincing, you’ve already seen how fast scams are evolving. Now, some of the biggest names in tech and retail are scrambling to catch up.

Eleven major companies across those industries, including Google, Amazon, OpenAI, Adobe, Pinterest, LinkedIn, Match Group, Meta, Microsoft, Target and Levi Strauss & Co., have signed a new agreement to share information about scams and fraud.

At first glance, it sounds like a strong step forward. But this is more than a coordinated effort. It is a response to how modern scams actually work today.

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter

SCAMMERS USING AI MEET THEIR MATCH AS OPENAI, TECH INDUSTRY FIGHT BACK

A new industry agreement aims to block scam accounts, fake domains and fraud patterns before they spread across platforms. (Tristan Spinski for The Washington Post via Getty Images)

Why online scams are getting harder to stop

Scammers no longer operate in one place. They might find you on social media, move the conversation to a messaging app, then push you to send money through a fake website or payment service. It is all connected. That’s exactly what this new agreement, called the Industry Accord Against Online Scams & Fraud, is trying to address.

Instead of companies working in isolation, they are promising to share threat data in near real time. That includes things like scam accounts, fake domains and patterns tied to organized fraud. The idea is that if one company spots a scam early, others can block it before it spreads.

What the companies are actually promising

This is not just about talking. The companies outlined a few concrete steps they plan to take:

Share intelligence faster

They will exchange information about scam networks, tactics and accounts across platforms and with law enforcement.

Use AI to detect scams earlier

Many companies already rely on AI to flag suspicious behavior. Now they want to expand those systems to catch scams faster and more accurately.

Add stronger verification

Expect tighter checks for financial transactions to confirm both sides are legitimate.

Improve reporting tools

Users should see clearer ways to report scams and get help.

Push governments to act

Companies are also calling for scam prevention to become a national priority in more countries.

That all sounds promising. But there is a catch.

The biggest limitation you should know

This agreement is voluntary. There are no penalties if companies fail to follow through. That means success depends entirely on how seriously each company takes it.

Still, even a loose collaboration could make a difference. Scammers thrive in gaps between platforms. Closing those gaps, even partially, could slow them down.

YOUTUBE JOB SCAM TEXT: HOW TO SPOT IT FAST

Big Tech and retail leaders are promising faster scam detection, stronger verification and better reporting tools for consumers. (Halfpoint/Getty Images)

How AI is making online scams more dangerous

This push comes as scams are becoming more sophisticated and harder to detect. AI is a big reason why. Scammers can now:

At the same time, companies are using AI to fight back. Google alone blocks hundreds of millions of scam-related results daily, while Meta has removed massive numbers of scam ads using automated systems. It’s essentially an arms race.

What this means for your online safety

In theory, this agreement could lead to fewer scams slipping through the cracks.

You might start to notice:

Faster removal of scam accounts
More warnings when something looks suspicious
Fewer fake ads or impersonation attempts

But this won’t eliminate scams entirely. Criminal networks are global, coordinated and constantly adapting. So while companies are stepping up, your own awareness still matters.

Cybersecurity expert warns scams are evolving fast

To understand what this really means in practice, it helps to hear from people who track these threats every day. Trend Micro, a global cybersecurity company, says this kind of collaboration is long overdue.

Trend Micro’s VP of Consumer Marketing and Education, Lynette Owens, believes cross-industry coordination is a critical step forward as scams increasingly unfold across multiple platforms. She tells CyberGuy:

“It’s encouraging to see major platforms like Google, Meta and Amazon coming together to share intelligence and disrupt scam networks. Cross-industry collaboration has proven to be helpful in fighting other types of online harms and has been a fruitful counter-measure against scams and fraud in other countries. Anything that moves us more towards prevention is a win, as so much effort is currently directed at what happens after the harm is done.

“But while it’s a useful step forward, it’s not a complete solution. Scammers are constantly evolving, using AI and multi-channel tactics to create more convincing, personalized attacks that are harder for people to recognize in the moment.

“What consumers really need is intervention that alerts them where scams actually happen, with clear, timely signals that something isn’t right. In today’s environment, scams don’t come as a single message. They unfold over time and adapt faster than ever to changing consumer habits or platform best practices. Collaboration is an important piece of the puzzle, but the more tools consumers have at their fingertips to fight back, the better their chances at stopping a scam before any real damage is done.”

Her takeaway is clear. Collaboration helps, but it will not be enough on its own.

SPRING CLEAN YOUR DIGITAL FOOTPRINT: WHY RETIREES ARE SCAM TARGETS

Google, Amazon, Meta and other major brands are teaming up as AI-powered scams grow more convincing and harder to stop. (John Keeble/Getty Images)

How to protect yourself from online scams

Even as companies step up their defenses, there are still simple steps you can take right now to reduce your risk and stay one step ahead of scammers.

1) Avoid unknown links

Do not click links in unexpected texts, emails or messages. Instead, go directly to the official website by typing the address yourself.

2) Use strong security software

Install strong antivirus software to help detect malicious links, phishing attempts and suspicious apps before they cause harm. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com

3) Turn on two-factor authentication

Enable two-factor authentication (2FA) on your accounts whenever possible. This adds an extra layer of protection even if your password is exposed.

4) Limit where your personal data appears

The more your personal information is available online, the easier it is for scammers to target you. Consider using a data removal service to reduce your exposure on data broker and people-search sites. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com

5) Monitor your accounts regularly

Check your bank, credit card and online accounts often so you can catch suspicious activity early and act quickly.

Take my quiz: How safe is your online security?

Think your devices and data are truly protected? Take this quick quiz to see where your digital habits stand. From passwords to Wi-Fi settings, you’ll get a personalized breakdown of what you’re doing right and what needs improvement. Take my Quiz here: Cyberguy.com

Kurt’s key takeaways

This new alliance signals a shift. Tech companies are starting to treat scams as a shared problem rather than isolated incidents. That’s a big step in the right direction. But whether it actually slows down scammers will depend on execution, not promises. Coordination helps, but enforcement and accountability matter just as much.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

If scams keep getting smarter, should tech companies be required to do more than just cooperate voluntarily? Let us know by writing to us at Cyberguy.com