I wrote a blog about a #malvertising campaign leading to a fake system update page.

In reality, it is the Aurora stealer packaged inside the stealthy Invalid Printer loader.

https://www.malwarebytes.com/blog/threat-intelligence/2023/05/fake-system-update-drops-new-highly-evasive-loader

Fake system update drops Aurora stealer via 'Invalid Printer' loader

Not all system updates mean well, and some will even trick you into installing malware.

Malwarebytes