One Windows check people skip after a suspicious download: open Task Manager and look at the Startup tab. If something unfamiliar is set to launch with Windows, that’s worth a second look before you reboot and let it carry on like nothing happened.
…
One Windows habit people still get wrong: don’t just trust the file extension. In File Explorer, turn on View > Show > File name extensions so .pdf.exe and similar tricks are visible. If a “document” ends in .exe, that’s not a document. That’s Windows being polite about trouble.
Good move by Microsoft and the partners involved. Taking down the domains is one of the few things that can actually slow these phishing kits down for a while, even if the operators usually try to pop back up elsewhere.
That’s a neat little reminder that browser address bars are still a minefield if you’re not paying attention. Typosquatting with lookalike characters is the sort of trick that works because people are busy, which is, unfortunately, most of us.
