Fake MS Security Update w/worm...
FYI...
Fake MS Security Update w/worm...
- http://www.pcworld.com/article/21549...ty_update.html
Jan 4, 2011 - "... the malware crowd is exploiting Microsoft's routine of releasing fixes on Tuesdays and sending out fake security emails bent on infecting their targets with a worm... "Please notice that Microsoft company [sic] has recently issued a Security Update for OS Microsoft Windows," the fake notice reads in typical fractured prose. It then goes on to give instructions for installing the fake security file, KB453396-ENU.exe. "If nothing changes after you have run the file, probably in the settings of your OS you have an indication to run all the updates at a background routine," it explained..."
- http://nakedsecurity.sophos.com/2011...-spreads-worm/
Jan 4, 2011 - "... With so much effort being taken by the cybercriminals to hoodwink unsuspecting computer users, though, you would have thought they would have not made an elementary mistake in their forged email header. The messages we've seen claim to come from no-reply@microsft .com . That's right. "microsft"..."
:mad:
Fake MS SPAM malicious msgs...
FYI...
Virus Outbreak In Progress...
- http://www.ironport.com/toc/
Virus Outbreaks in the Last 24 Hours
(Last Updated: April 4, 2011) Trojan variant(s)...
Real-time Outbreak Details
- http://tools.cisco.com/security/cent...o=1&sortType=d
Malicious Microsoft Security Update E-mail Messages...
- http://tools.cisco.com/security/cent...?alertId=22862
... spam e-mail messages that claim to contain a security update for Microsoft Windows. The text in the e-mail message instruct the recipient to follow a link to receive the update. However, the link directs users to a malicious .exe file that, when executed, attempts to infect the recipient's system with malicious code... sample of the e-mail message that is associated with this threat outbreak:
"Subject: Protect yourself using latest Microsoft release!..."
Fake Post Express Parcel Delivery Failure Notification E-mail Messages...
- http://tools.cisco.com/security/cent...?alertId=22778
:fear::mad:
Fake MS Patch Tuesday Alert - SPAM ...
FYI...
Fake MS Patch Tuesday Alert - SPAM...
- http://community.websense.com/blogs/...day-alert.aspx
9 May 2011 04:07 PM - "... attack ties in almost perfectly with the release of patches on the upcoming "Patch Tuesday" from Microsoft. The attack lures the unsuspecting user into following the link provided within the email message, which evidently infects their system as it downloads an executable to the user's machine. The executable (the fake patch) is being hosted on a compromised domain... VirusTotal*... The email message looks quite legitimate, as the display names within the headers actually say they originate from Microsoft (spoofed). Other attributes of the message include a sense of urgency with the subject: "URGENT: Critical Security Update"..."
* http://www.virustotal.com/file-scan/...fb0-1305031214
File name: SECURITY_FIX_0231_.exe
Submission date: 2011-05-10 12:40:14 (UTC)
Result: 17/40 (42.5%)
There is a more up-to-date report...
- http://www.virustotal.com/file-scan/...fb0-1305194349
File name: SECURITY_FIX_0231.exe
Submission date: 2011-05-12 09:59:09 (UTC)
Current status: finished
Result: 25/42 (59.5%)
- http://tools.cisco.com/security/cent...?alertId=23105
May 10, 2011 - "... SECURITY_FIX_0231.exe ... another variant SECURITY_FIX_0293.zip..."
___
- http://www.zdnet.com/blog/security/f...crimeware/8646
May 12, 2011
:mad:
Fake AV cloaks itself to appear to be MS Update
FYI...
Fake AV cloaks itself to appear to be MS Update
- http://nakedsecurity.sophos.com/2011...rosoft-update/
June 9, 2011 - "... criminals behind fake anti-virus continuing to customize their social engineering attacks to be more believable to users and presumably more successful... This week they've started to imitate Microsoft Update. The page is nearly an exact replica of the real Microsoft Update page with one major exception... It only comes up when surfing from Firefox on Windows. The real Microsoft Update requires Internet Explorer.The same site was also hosting the traditional Windows XP explorer scanner we have seen for years, as well as a new Windows 7 scanner. Similar to spam messages that have corrected their grammar and use correct imagery and CSS, the attackers selling fake anti-virus are getting more professional. They use high quality graphics and are using information from our UserAgent strings that are sent by the browser to customize your malware experience..."
___
- http://www.infoworld.com/print/163719
2011-06-09 - "... It starts with an alert window popping up, purportedly for installing a critical update to - fittingly - the Windows Malicious Software Removal Tool. The window does bear a striking resemblance to a real Windows Update window. If the user agrees to install the 2.8MB "security update," he or she really ends up installing scareware..."
:mad:
