Your browser does not seem to support CSS. If images appear below, please disregard them.
toggle
May
S M T W T F S
1 2 3 4 5 6 7
8 9 10 11 12 13 14
15 16 17 18 19 20 21
22 23 24 25 26 27 28
29 30 31
Sponsored Links
Latest Postings
Topic Options
Rate This Topic
#34835 - 05/21/05 02:19 PM Hackers Circulate Fake Microsoft Security Update
Joined: Sep 2002
Posts: 553
Digital Geek Offline
UGN Super Poster
Digital Geek Offline
UGN Super Poster

Joined: Sep 2002
Posts: 553
Cluj-Napoca, Romania
Hoping once again to fool security-minded users, malicious hackers have released a fake Microsoft Latest News about Microsoft security Latest News about Security update, claiming that it is an update to Internet Explorer, Outlook Express and Outlook.

The release of such e-mails has become common after a Microsoft security patch update, to the point that bogus updates sometimes appear only hours after the official patches are released.

The latest version is titled the "May 2005 Cumulative Patch" and claims to resolve all known security vulnerabilities with IE, Outlook and Outlook Express. The e-mail mimics Microsoft language and official communication in an attempt to look legitimate.

Microsoft did release a patch in May, but not for IE or its e-mail clients. Users who attempt to download the fraudulent update are infected with the Pinfi virus.

Using Microsoft to trick users into downloading Trojan horses and viruses has become a very standard tactic, said Graham Cluley, senior technology consultant at security firm Sophos Latest News about Sophos.

"Attackers want to get the maximum number of users to download their virus," he said. "Since Microsoft updates are relevant to so many people, they see it as an easy way to fool users into downloading what they shouldn't."

Other companies, such as banks and financial institutions, also are used to lure unsuspecting users, but widespread user education has made many wary of such e-mails.

Now, it appears, attackers are turning to security firms, hiding viruses in messages that seem to be from Symantec Latest News about Symantec or Microsoft's security team.

Stronger Effort

Simply because malicious hackers have made it business-as-usual to target Microsoft does not mean the Redmond behemoth is taking the situation lightly.

The company has pointed users toward a section on its Web site titled "How to Tell If a Microsoft Security-Related Message is Genuine."

On the site, Microsoft notes that there are ways to spot imposters, emphasizing that legitimate Microsoft e-mails contain no attachments. They also reference security information that already is on the Microsoft Web site and have hyperlinks that begin with http://www.microsoft.com/security.

Microsoft's site also gives an example of a fake bulletin from 2003, noting that its professional appearance and sincere, helpful tone tricks many users into infecting their systems.

SOURCE

Top
Sponsored Links
#34836 - 05/22/05 03:52 AM Re: Hackers Circulate Fake Microsoft Security Update
Joined: Feb 2002
Posts: 7,194
Gremelin Offline
Community Owner
Gremelin Offline

Community Owner

Joined: Feb 2002
Posts: 7,194
Portland, OR; USA


Donate to UGN Security here.
UGN Security, Back of the Web, and VNC Web Services Owner
Top
#34837 - 05/22/05 04:37 AM Re: Hackers Circulate Fake Microsoft Security Update
Joined: Apr 2005
Posts: 247
KillHour Offline
UGN Member
KillHour Offline
UGN Member

Joined: Apr 2005
Posts: 247
USA
hehe, very funny...


"We can categorically state that we have not released man-eating badgers into the area."

-UK military spokesman Major Mike Shearer
Top

Member Spotlight
Gremelin

Gremelin
Portland, OR; USA
Posts: 7,194
Joined: February 2002
Show All Member Profiles 
Forum Statistics
Forums46
Topics45,543
Posts80,711
Members2,157
Most Online1,567
Apr 25th, 2010
Top Posters(All Time)
UGN Security 38,707
Gremelin 7,194
§intå× 3,255
SilentRage 1,273
Ice 1,146
pergesu 1,136
Infinite 1,041
jonconley 955
Girlie 908
unreal 860
Newest Members
Herbert_Sherbert, codemauve, Lillysdragon1984, Brewwit, boa
2157 Registered Users
Who's Online Now
0 registered members (), 3 guests and 1 spider.
Latest News