Hackers take advantage of Microsoft security bulletins to spread malware
In the wake of highly publicized security alerts from software giant Microsoft, online criminals have used the wave of public interest to push malicious software on an unsuspecting public.
The malicious emails take the usual form: A message from an authoritative source - in this case, Microsoft director of security assurance Steve Lipner - warns that security updates must be installed to ensure the security of the targeted PCs. The "updates" turn out to be malware.
However, while there are frequently a few tell-tale signs that an email is malicious, this campaign gives the game away several times, misspelling the names of Windows products and presenting erroneous technical details. Sophos labs also notes that the malware included in the email was detected immediately and failed to run on a test system.
