Microsoft disables online Windows App Installer after attackers abuse it

The Microsoft App Installer is being abused by attackers who trick users into installing malware by impersonating popular software applications on search engine results. Cybersecurity firm Microsoft has reported an uptick in this type of attacks in late 2023, with malware like BATLOADER, Cobalt Strike Beacon and the Black Basta ransomware being deployed using this method.