Scammers Impersonating Windows Defender to Push Malicious Windows Apps

**McAfee advisory:** Attackers use deceptive Windows-style push notifications to lure victims to updatedefender.online, which serves a signed MSIX installer that installs a data‑stealing trojan (Eversible.exe) that harvests system details, browser/profile data, and cryptocurrency wallet information; the report includes malware hashes, the malicious domain, detection status, and user mitigation advice.