Fake Microsoft Patch E-Mail Vista News Discuss Fake Microsoft Patch E-Mail in the Windows Vista forums; Fake Microsoft Patch E-Mail Lets Hackers Build Botnet The Internet Storm Center is warning that hackers are spamming e-mail messages that purport to be a Microsoft security update. ...

[Snuffy]

Fake Microsoft Patch E-Mail Lets Hackers Build Botnet
The Internet Storm Center is warning that hackers are spamming e-mail messages that purport to be a Microsoft security update. The phony e-mail doesn't carry any fixes. Actually, it contains malicious code to infect unwary users who open the message and click on any links or attachments.

"Microsoft would never e-mail patches, so I don't know why people still fall for this but they do," said Johannes Ullrich, chief technology officer for the Internet Storm Center, in an interview. "It seems like everybody got a copy of the e-mail. It was spammed out to a very large list. How many people clicked on it, I really don't know."

The malicious code in the so-called patch is a backdoor Trojan that opens the infected system so it can be remotely manipulated by the hacker. It basically turns the machine into a bot, which can be added to a growing botnet...
winbeta.org - 28.06.2007