“critical Update” Leads To Critical Info Theft

[Peaches]

Jun22

“Critical Update” Leads to Critical Info Theft

12:40 am (UTC-7) | by Argie Gallego (Anti-spam Research Engineer)

Microsoft Corporation regularly issues updates to fix bugs and security vulnerabilities in its software products. These updates are meant to protect its users from different attacks that depend mainly on exploiting these documented bugs.

Close to the weekend, we identified spam (click Figure 1 thumbnail for larger view) claiming to be a Microsoft Outlook and Outlook Express critical update that “offers the highest levels of stability and security.”

A tricky difference here is that all the links in the email (the links to Contact Us, Privacy Statement, Trademarks, and Terms of Use) are legitimate–except one. The URL where the “critical update” may be downloaded looks legitimate, but hovering over the hyperlink (or checking the source code of the mail) reveals a totally different destination

details & screenshots - trendmicro - http://blog.trendmicro.com/