Fake Windows Security Bulletin Notifications Link to Malware

[Peaches]

Fake Windows Security Bulletin Notifications Link to Malware

It's not a critical update, it's malware

Malware distributors continue resorting to the fake software update lure for their email spam campaigns. The latest attack poses as a notification regarding a Windows security bulletin, which links to a malicious executable.

The rogue emails impersonate Steve Lipner, Microsoft's Director of Security Assurance, who allegedly informs the receiver about a high-priority security update for all versions of Windows. "Please notice that Microsoft company has recently issued a Security Update for OS Microsoft Windows. The update applies to the following OS versions: Microsoft Windows 2000, Microsoft Windows Millenium [sic], Microsoft Windows XP, Microsoft Windows Vista and Microsoft Windows 7," the fake message reads.

There are some more or less subtle signs that this email is fake, depending on who's at the receiving end. For example, for an IT professional, the poor technical language used or the fact that Windows Millennium is no longer receiving updates since 2006, when its product life ended, will ring alarm bells. However, the message is credible enough to trick an average user.

More details at Softpedia - http://news.softpedia.com/news/Fake-Window...re-129023.shtml