C'est nearly impossible for an ordinary hacker to send you quelque chose through the Windows Mise à jour système.
What you heard is different though. C'est spyware that looks like c'est Windows Mise à jour and tells you to installer it. Si vous ensuite click installer a UAC prompt pops up asking for administrative privileges. Si vous accept that, it can installer spyware. Do notez que Windows Mise à jour will NEVER require you to pass an UAC elevation test. Ce n'est pas required as the Windows Mise à jour service runs as SYSTEM, which has the highest privileges. The seulement prompt vous allez get during Windows Mise à jour installations, is approving a license agreement.
EDIT: made changes vers le post parce que the government may be able to pull this off, but I doubt as a normal citizen, vous pouvez protect against the government anyway.