Windows Users Warned Against Fake E-mails Providing Updates

Trend Micro, an online security solution provider, has released a warning that Window PC users are receiving fake e-mails that claim Service Pack 1 and Service Pack 2 have vulnerabilities that can break down software or even hardware of computers. Both the Service Packs include updates for the Windows Operating System.

The security firm also states that these messages claim to provide fix for the flaws but they are sent by hackers to deceive innocent users into clicking on the link. When a user clicks on the given link, he is directed to a fake website and is asked to download a file. This file is a malware called TROJ_DLOADER.CUT, said Trend Micro.

After the installation of TROJ_DLOADER.CUT, it connects to another malicious file called TSPY_BANKER.MCL, said the security company. This malware is very lethal and secretly tracks the transactions of online users to steal the banking details and other sensitive information.

Security researchers at Trend Micro also added that there were no reports of attacks by TSPY_BANKER variants till few days back, but the recent incident might have ended the period. Thus, Windows users are recommended to avoid opening spam messages and refrain from clicking on links embedded in these messages.

Agreeing to the suggestion given by Trend Micro to Windows users, Microsoft Spokesman Thomas Baumgaertner said that his company didn't send software by e-mails and computers users should prevent opening fake e-mails, as reported by EarthTimes on March 29, 2009. This implies any e-mail claiming to provide updates and fix vulnerabilities should be considered fake no matter how convincing it seems. He further added that Microsoft only attach link to its website in e-mails and nothing else.

Baumgaertner said that spammers had been using this technique of providing updates to Windows users for a very long time. As preventive measures, he suggested to users that they should only install security updates directly sent by Microsoft.

In fact, the best and safest option to download updates is setting up a feature in computer that automatically installs software.

Related article: Windows XP Fault Strike Firewall

» SPAMfighter News - 4/2/2009