Microsoft recently reminded Windows 10 users that support for the operating system will end on October 14, 2025. 

Microsoft 10 launched in July 2015, and the company was obliged to give 10 years of support. Windows 10 is the most popular Windows OS, accounting for 54% of market share or more than $800 million users, according to Statista. In 2024, Microsoft Windows ran on 1.6 billion active devices.

For users wishing to continue using Windows 10 beyond its end-of-support date, Microsoft offers a one-year Extended Security Update (ESU) program priced at $30. However, without ESU or an upgrade to Windows 11, users will face increased security risks.

Related: Tech group leader sends startling eight-word message about tariffs

The tech giant, which celebrated its 50th birthday this month, has not provided as much information about the ESU program for regular users as it has for business customers. This may be a strategic move to encourage users to upgrade to Windows 11 rather than opting for the ESU, writes Windows Latest.

The winding down of support is particularly important, given a new emerging cybersecurity threat that could pose a major risk to Microsoft’s customers.

Microsoft Windows faces a malware security threat in 2025.

Image source: Brad Barket/Getty

“Extremely serious threat” to millions of Microsoft Windows users

An updated version of malware known as Neptune RAT (Remote Access Trojan) presents an “extremely serious threat” to millions of Windows users. 

Cyfirma, a Singapore-based cybersecurity firm, recently issued a warning regarding the malware, which has spread across platforms such as GitHub, Telegram, and YouTube. The malware is often marketed as the “Most Advanced RAT,” according to Cyfirma.

Cyfrima describes Neptune RAT as a “sophisticated and highly dangerous” piece of malware capable of bypassing traditional security measures, stealing passwords, and even destroying Windows operating systems. The RAT can compromise over 270 applications, including browsers, and features both ransomware capabilities and live desktop monitoring.

Related: Veteran fund manager who forecast S&P 500 crash unveils surprising update

Designed to disrupt and steal sensitive data, Neptune RAT applies high-level anti-analysis techniques to maintain a presence on the victim’s system for a long period of time. 

Once established, it can fully take control of a device, extracting sensitive information and receiving further instructions from its handlers. 

The worst part: the developer suggests that there is an even more powerful version of this malware.

“Ethical Purposes,” yet targets Chrome, Opera, Brave & More

Neptune RAT’s creator, who made it available without the source code, claims it is intended for “educational and ethical purposes,” though the malware’s capabilities make it hard to believe that explanation. 

The developer, currently residing in Saudi Arabia, states that this is a free version, implying the existence of a more advanced, paid version.

Sensitive information that Neptune RAT can collect includes the user’s name, computer details, operating system data, hardware specifications (such as CPU, RAM, and hard drive serial number), network data, and even information about connected USB devices. 

Written in Visual Basic .NET, the RAT can swap clipboard contents with the attacker’s cryptocurrency wallet addresses. Its code is obfuscated with Arabic characters and emojis to make reverse engineering more difficult.

Additionally, Neptune RAT can extract and decrypt passwords from browsers such as Chrome, Opera, Chromium, 360Chrome, Brave, Yandex, and others. These credentials are then transmitted to the attacker’s server.

To mitigate the risk of an attack, Cyfirma recommends several courses of action.

Implementing threat intelligence to detect indicators of compromise.Utilizing advanced endpoint protection platforms with real-time monitoring.Deploying host-based intrusion prevention systems.Employing strong email security filters and regular vulnerability scans.Software should only be downloaded from trusted sources.

Lowest stock price in more than 15 months

In 2024, Microsoft reported revenues of $245.1 billion, a 15.67% year-over-year increase. Net income grew 22% to $88.1 billion, with earnings per share reaching $11.8. Year-to-date, Microsoft stock is down 15.88%, trading at $354.56.

On April 7th, before Cyfirma’s warning about Neptune RAT, Microsoft’s stock dropped to $350.09 per share in the morning session, marking its lowest point in over a year. While it closed the session at $357.86 and showed some recovery on Tuesday morning, it still remains below its lowest level in more than 15 months.

Even a milestone as significant as the 50th anniversary of one of the world’s largest tech companies could not shield its stock from the market’s reaction to the emerging cybersecurity threat and the ongoing impact of Trump’s tariffs.

Related: Veteran fund manager unveils eye-popping S&P 500 forecast