BIOS Update Scam and Malware - How to Protect Yourself

How the Scam Works

Scammers use several clever angles to convince you that your computer is vulnerable and requires immediate attention:

• Fake Browser Pop-ups: You visit a compromised website and suddenly see a terrifying, full-screen alert claiming your BIOS is "outdated" or "infected". It provides a convenient link to download a "fix."
• Deceptive Windows Screens: Fraudsters have popularized "ClickFix" tactics. They prompt you to use the Windows Run box (pressing Win + R) and paste a specific command. This action secretly runs a script that downloads malware, displays a fake "Windows Updating" screen, and ultimately locks you out of your system.
• Impersonating Support: Scammers may call or email you, claiming to be from Microsoft or your computer’s manufacturer (like Dell or HP), urgently insisting that your BIOS needs to be patched to prevent a breach.

What Happens If You Fall for It?

Depending on the specific variant of the scam, the fraudsters' goals include:

• Ransomware: The fake update actually infects your computer with encryption software that holds your personal files hostage until you pay a ransom.
• Tech Support Fraud: The update screen might display a fake error code with a phone number for "support." When you call, scammers demand hundreds of dollars to "fix" the issue and request remote control of your computer.
• Credential Theft: The file you download may log your keystrokes or steal your saved passwords and financial information.

How to Protect Yourself

• Never use unsolicited download links: Only download BIOS updates directly from your computer manufacturer's official support page (e.g., the official Dell, Lenovo, or ASUS websites).
• Ignore browser alerts: Legitimate companies will never freeze your browser and demand you download a .exe file to update your BIOS.
• Understand BIOS update norms: Genuine BIOS updates require a restart and do not involve entering code into the Windows Run prompt manually. In fact, if your computer is running smoothly, you usually do not need to update your BIOS at all.