[xmca] Fwd: Don't download Microsoft patch

---------- Forwarded message ----------
From: Bruce Jones <bjones@weber.ucsd.edu>
Date: Jun 28, 2007 4:01 PM
Subject: Don't download Microsoft patch
To: undisclosed-recipients

Experts at Sophos, a world leader in IT security and control, have warned
of a widespread attempt to infect email users by sending them a warning
about a bogus Microsoft security patch.

The emails, which have the subject line "Microsoft Security Bulletin
MS07-0065" pretend to come from Microsoft, and claim that a zero-day
vulnerability has been discovered in the Microsoft Outlook email
program. They go on to warn recipients that "more than 100,000 machines"
have been exploited via the vulnerability in order to promote medications
such as Viagra and Cialis.

Users are encouraged by the email to download a patch which, it is
claimed, will fix the problem and prevent them from becoming attacked
by hackers.

However, clicking on the link contained inside the email does not take
computer users to Microsoft's website but one of many compromised websites
hosting a Trojan horse.

DO NOT download that file.

bj
_______________________________________________
xmca mailing list
xmca@weber.ucsd.edu
http://dss.ucsd.edu/mailman/listinfo/xmca
Received on Thu Jun 28 16:38 PDT 2007