Skip to main content

Beware of fake Microsoft security alerts

With Microsoft's monthly patch release expected on Tuesday, scammers are sending out fake security bulletins that attempt to install malicious software on victim's computers.

The e-mail messages claim to describe a "Cumulative Security Update for Internet Explorer" that fixes a critical security flaw in the browser. It comes with a link entitled "Download this update."

When users click on this link, they are taken to a server that attempts to install malicious software known as Trojan-Downloader.Win32.Agent.avk.

This Trojan software then attempts to reach out to other computers on the Internet in order to install more programs on the victim's computer.

The SANS Internet Storm Center received its first and only report of the scam on Thursday night, but a second sample has also been posted to the Chinese Internet Security Response Team blog.

SANS volunteer Lenny Zeltser believes that the criminals behind this scam may be gearing up for more activity. The trojan looks for three different servers, and two of them have domains that haven't yet been registered. He suspects the authors of the scam may be planning to register those domains before embarking on a more widespread campaign.

The two e-mail samples contained obvious errors that would be caught by technically savvy users. For example, although the patch Zeltser examined claimed to have been issued in June 2007, it was entitled MS06-4 instead of the more-plausible MS07-004.

Still, these scams need to fool only a small percentage of victims in order to be successful, said Zeltser, information security practice leader at Gemini Systems in New York. "You wonder, does it really matter that there are these strange discrepancies in the way the fake security alert is written," he said. "People who would notice probably would be the kind of people who wouldn't click on the link."

Another tip-off: Microsoft does send out notification e-mail when it publishes security bulletins, but the links in these alerts take users to the bulletins themselves, not to executable downloads


Author: Robert McMillan
src:infoworld.com

Comments

Popular posts from this blog

जेनेरेटरबाट गाउमै कम्प्युटर कक्षा

त्रिवेणी र्-पर्वत, फागुन २८ - "जहा इच्छा, त्यहा उपाय " । प्रविधि मोहमा होम्मिएका पर्वतको दर्ुगम गाउ“ त्रिवेणीका युवाले यही उखानलाई चरितार्थ गरेका छन् । बिजुलीे पुग्न नसकेको दर्ुगम गाउ“का यी युवाले जेनेरेटर चलाएर कम्प्युटर सिक्न सुरु गरेका छन् । बेहुलीबास गाविसका दीपक काफ्लेले त्रिवेणीमा खोलेको ओम इन्स्िटच्युटमा यहा“का विद्यार्थी र अभिभावक कम्प्युटरमा झुम्मिन्छन् । इन्स्िटच्युटमा दैनिक २० जनाभन्दा बढी कम्प्युटर सिक्न थालेका छन् । एक जनाबाट महिनाको एक हजार पा“च सयदेखि २ हजारसम्म लिने गरेको काफ्ले बताए । सरकारले वितरण गरेको विद्युत् लाइन पुग्न नसके पनि लाखांै खर्चेर उनले जेनेरेटर र कम्प्युटर खरिद गरे । गाउ“लेलाई सेवा दिने र व्यवसायसमेत गर्ने उद्देश्यले आफूले यस्तो काम थालेको काफ्लेले बताए । 'सहरमा गएर यस्तै काम सिकियो गाउ“लेलाई पनि सिकाउने रहर लाग्यो,' उनले भने । सदरमुकामदेखि यातायात र सूचनाका लागि समेत निकै पछाडि परेको गाउ“मा स्थानीय व्यक्तिले नया“ प्रविधि सिकाउने कक्षा खोलेपछि जान्ने र सिक्ने रहर भएकास“गै रमाइलोका लागि पनि धेरै जना आउने गरेका छन् । काफ्लेका अनुसार

Prashant Tamang -A Nepalese in Indian Idol 3

CONGRATULATION !!!! PRASHANT FOR BEING INDIAN IDOL Here in US, we don't have Sony channel, may be there is but the region where i am, we don't have. Whatever ... am glad to hear that PRASHANT became an INDIAN IDOL. Update(Sept,12 2007): Prashant Tamang in Boudha Prashant Tamang is becoming sensation day by day as the final decisive day is approaching nearer and nearer. For his support, lots of people are convincing people to vote for him. People are relating his victory with nation's pride which i don't like. Besides, the communal attachment for him is growing day by day. It's only we mongolian face supporting him in Nepal. Like in Dharan and other different place of our country,people has put his banners, posters showing support for him. Yesterday, it was no moon day and i was lighting butterlamps in front of BoudhaNath stupa and suddenly i saw, there is huge banner of Prashant Tamang. Tamangs of Boudha has done this admiration for him. Normally, we see portrays

Do you have a Blogger(blogspot) Blog and do you know Google is deleting blogger blogs??

As usual, I was checking backlink tool to find some of the friends link (who has linked backed to me before) if they still have my link backlinked to me or not. Well, some of them didn't link back to me. I checked their site and the message I got upon visiting their blogspot(blogger) blog was something like "this blog has been deleted." As I was visiting some of the other blogspot blog, I found few of them got deleted too. I thought, may be they got over blogging. Recently more and more blogspot(blogger) blogs are unavailable or being deleted. Now, these things forced me to think why those blogs are being deleted. I usually check official google blog for any kind of stuff they are upto. Their blog was shut down too(it's some days before), they are online now though. But, it's quite eerie because this very blog of mine is hosted on blogger's server too. I don't know what happened to their official blog but it's confirmed news they are deleting blogs. M