E-victims.org: Microsoft update phishing attack

Tony

What Consumer Founder
Apr 7, 2008
18,307
3
38
Bolton
Emails encouraging to get the latest Microsoft updates are actually phishing attacks. Criminals sending out spoof/fake emails with links to spoof sites where instead of downloading the latest Microsoft security updates you download malware.

E-Victims.Org has a list of free scans that will check if your all your computer software is up to date.

Below are two examples of spoof emails:

 
From: Microsoft [mailto:team@microsoft.com]
Sent: 22 October 2009 11:49
Subject: Update : DNCSKEUPXR [I'd presume that this is a randomized string, meant to foil simple filtering by subject]
Importance: High


Security update

When necessary, Microsoft provides a new security update on the second Tuesday of each month and publishes a bulletin to announce the update.
Occasionally, updates are released more often.

The links below go to the latest update download.(links to a spoof/fake Microsoft site)

Each bulletin includes links to the security updates. Microsoft has submitted a new update...

Microsoft update phishing attack