Scammers seems to have one common language, they always claim there is critical vulnerability or urgent updates making people feel it is a secure update and people with little or no experience about phishing links just fall for this.

This doesn't look official at all. The scammer is still a learner. Maybe the Idea was to try out something new he or she learnt.