Boards Index › General discussion › Technical Q&A › ** BEWARE ** – Fake Microsoft update released today
-
AuthorPosts
-
10 October, 2008 at 10:15 am #11852
You may be unlucky enough to receive an e-mail into your inbox that looks as if it comes to you from this address: Microsoft Update [[email protected]]
This address has been ‘spoofed” and the mail does NOT originate from Microsoft but in fact originates in northern India from an IP address 122.163.247.127
Attached to the mail is a file which contains a “Trojan” (Trojan-Spy.Win32.Goldun.bce)
Trojan.Win32 is used by fake antispyware programs to promote themselves. This is one of the worst kind of trojans because it claims to be a legitimate program to remove viruses from your PC, but in reality, it infects your computer with viruses and trojans.
They popup fake security warnings that look similar to Windows notifications, in order to trick you into purchasing their fake full version. This Trojan may attempt to change your computer’s desktop, hijack your browser, monitor your Internet browsing activities, change your system files, and can do this without your knowledge or permission.
DO NOT OPEN OR RUN ANY ATTACHMENT WITH THIS E-MAIL
The body of the email is as follows:
Dear Microsoft Customer,
Please notice that Microsoft company has recently issued a Security Update for OS Microsoft Windows. The update applies to the following OS versions: Microsoft Windows 98, Microsoft Windows 2000, Microsoft Windows Millenium, Microsoft Windows XP, Microsoft Windows Vista.
Please notice, that present update applies to high-priority updates category. In order to help protect your computer against security threats and performance problems, we strongly recommend you to install this update.
Since public distribution of this Update through the official website http://www.microsoft.com would have result in efficient creation of a malicious software, we made a decision to issue an experimental private version of an update for all Microsoft Windows OS users.
As your computer is set to receive notifications when new updates are available, you have received this notice.
In order to start the update, please follow the step-by-step instruction:
1. Run the file, that you have received along with this message.
2. Carefully follow all the instructions you see on the screen.If nothing changes after you have run the file, probably in the settings of your OS you have an indication to run all the updates at a background routine. In that case, at this point the upgrade of your OS will be finished.
We apologize for any inconvenience this back order may be causing you.
Thank you,
Steve Lipner
Director of Security Assurance
Microsoft Corp.OK the slightly ”off” English might be a clue that this mail is not all that it seems ……. but it appears authentic on the face of it and I suspect that many users could be tricked into trusting it.
Always remember that Microsoft NEVER sends security updates (OR Windows updates) as attachments to an e-mail.
10 October, 2008 at 2:23 pm #380506but will it make my penis bigger ?
10 October, 2008 at 3:14 pm #380507This address has been ‘spoofed” and the mail does NOT originate from Microsoft but in fact originates in northern India from an IP address 122.163.247.127
Not happy with all the shops n houses they want my bloody computer as well ! :lol:
10 October, 2008 at 10:26 pm #380508I thought everyone updates Microsoft from the update page, not from an email?
10 October, 2008 at 10:30 pm #380509That’s the whole point Matty …. you all SHOULD use the update page. However, the e-mail is sufficiently convincing that some people MIGHT be tempted to open the attachment.
That would be the worst thing you could do…… hence the warning.
13 October, 2008 at 3:21 pm #380510By way of updating this warning …. I’ve received the same message again, still spoofing that it is genuinely from Microsoft.
The attachment is called “KB 573400.exe” and is trying to spoof you into believing that it is an article from Microsoft’s Knowledge Base.
This file contains a virus and if you downloaded it and opened it, the executable would install a virus on your computer.
13 October, 2008 at 6:09 pm #380511Is this possibly what i’ve had? On an automatic update it wanted me to upload it had widows xp on it. Yes that’s right… typo included! I thought the spyware blocker it wanted me to download was from microsoft until i saw the glaring spelling error.
13 October, 2008 at 10:31 pm #380512Oh dear oh dear !!! :shock: :shock: :shock:
14 October, 2008 at 5:28 pm #380513Yes, thanks PB! :roll: :D
14 October, 2008 at 5:37 pm #380514You know im sure I had something like that last week…I bet thats why my laptops got a virus now! :evil:
Costing loads to sort it too..cos I didnt have the original disc for them to do a system restore.. Poxy emails!!!
-
AuthorPosts
Get involved in this discussion! Log in or register now to have your say!