ESET Warns Users about Fake Windows & Outlook Update E-mails

According to the Web security firm 'ESET,' cybercriminals are sending fake notifications of update Windows and other such programs. ESET states that the messages redirect users to a website which serves them with malware, identified by the firm as 'Win32/Injector.ACX.'

It appears that the e-mail, with the subject "Update: DNCSKEUPXR", has been sent by Microsoft. Text of the e-mail states that whenever required, Microsoft releases a new security update on second Tuesday of every month. To announce the update, Microsoft publishes a bulletin. The link provided in the e-mail will enable user to download the latest update, added the e-mail.

Furthermore, the e-mail states that there is nothing new in terms of functionality, but it fixes a security vulnerability, classified as 'high', which is the highest level. Vulnerability means probability of external attacks by means of Internet Explorer or Outlook Express. Thus, users are recommended to install the update to safeguard their systems.

The phony e-mail, which uses the name of Adrian King as the director of Security Assurance Microsoft Corp, asks its victims to click on a link of fake Microsoft site. However, Adrian King had left Microsoft many years ago, said the security researchers. It has now become a common practice that same job titles with different names are mentioned in such messages.

ESET researchers noticed that another security firm 'Sophos' at the same time posted a blog, which reported similar fake updates for Microsoft Outlook/Outlook Express.

Researchers added that although the messages were quite different and contained links to a site imitating Microsoft's update site, users should not blindly trust this site.

Moreover, researchers at Sophos said that similar e-mail came into notice earlier as well, but the format of October version slightly different. This version contains a link to a website enabling users to download the 'Microsoft/Outlook/Outlook Express Update' instead of an attached executable.

Hence, users are suggested not to trust links provided in a message if they are not sure of the source. It is strongly advised to either use update procedure within Windows itself or visit a known and authentic URL.

Related article: ESET Discusses malware Writers’ Trend

» SPAMfighter News - 11/7/2009