It might have a legit looking phone number, but that Windows Defender alert might be fake. Here's what to look out for.