Sophos warns over fake MS update worm

By

Spammers target users with bogus attachment.

Security firm Sophos is warning Windows users to beware of a fake security update scam that installs a worm in target machines.

Sophos warns over fake MS update worm

The attack arrives in the form of a spam email that appears to come from Microsoft, warning users to update their operating system.

Anyone opening the email is advised to follow instructions, which involve installing the attached KB453396-ENU.zip file.

Microsoft never sends out such emails, instead using its own update system, but Sophos believes the scam could fool some users because it looks official.

“In the current example, they've spammed out an email containing a worm, which even quotes the real name of a senior member of Microsoft's security team - Steve Lipner - to try to fool you into believing it is genuine,” the company said on its Naked Security blog.

The emails have a subject line of "Update your Windows".

This article originally appeared at pcpro.co.uk

Got a news tip for our journalists? Share it with us anonymously here.
Copyright © Alphr, Dennis Publishing
Tags:

Most Read Articles

Qantas facing 'significant' data theft after cyber attack

Qantas facing 'significant' data theft after cyber attack

Home Affairs officer accessed data on "friends and associates"

Home Affairs officer accessed data on "friends and associates"

International Criminal Court hit by cyber attack

International Criminal Court hit by cyber attack

Ex-student charged over Western Sydney University cyberattacks

Ex-student charged over Western Sydney University cyberattacks

Log In

  |  Forgot your password?