Want to download Google Play Store on Windows 11? The popular tool appears to be secretly installing malware – scammed?!

An unpleasant surprise for Windows 11 users who thought that they could access the Google Play Store through the Powershell Windows Toolbox. This popular tool promised access to the Play Store and apps like Microsoft Office, but it turned out to be installing malware surreptitiously.

Windows 11 device users cannot download apps from the Play Store. The Powershell Windows Toolbox provided a solution: Via GitHub, a software download platform, users could download the Toolbox to access Play Store apps.

The tool quickly became popular, but now it turns out that it is not quite what it promised in the description. Instead of a manual tool, users install malware on their devices without anyone noticing.

The script silently downloads malware

Users who have the Toolbox installed must run a command that retrieves a script from Cloudfare Worker, a code provisioning platform. Without your knowledge, this allows Toolbox to install malware.

The technical website Bleeping Computer states that the malware is primarily intended to generate clicks on ads, which is called Trojan Clicker. In addition, a redirect has been detected for people who want to go to WhatsApp.com; They ended up on rogue websites.

The tool only targeted people whose device settings are set to English. Others have not been targeted, according to tech site addRom.

What should you do?

Powershell Windows Toolbox is no longer on GitHub. Is your computer settings set to English and have you ever downloaded this tool? Then you don’t have to worry right away, especially because researchers suspect that the malware was primarily used to generate advertising revenue. As a user, you are not exposed to any direct risks in this matter.

However, there may be more, and it’s a good idea anyway to check if strange tasks have been performed on your device. Techblog addRom has published a guide to Scan and delete unwanted tasks on your device†

Furthermore, it is generally a good idea to be aware of the risks of installing something that your device provider does not offer. And even if you get something from the official store, the apps are probably evil, according to a previous article by Scammed?! About Antivirus apps targeting your bank account†

Source: addRom / BleepingComputer / Tweakers