Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Hackers send flood of bogus Microsoft updates
#1
http://news.zdnet.co.uk/internet/security/...39194302,00.htm

Quote:Hackers send flood of bogus Microsoft updates


Dan Ilett
ZDNet UK
April 08, 2005, 13:30 BST
 
A message that appears to be from Microsoft is urging people to download a malicous program from a fake Web site.

On the day that Microsoft announced details of its next round of monthly patches, fraudsters have sent out a wave of emails disguised as messages from the software behemoth in a bid to take control of thousands of computers.



The emails contain bogus news of a Microsoft update, advising people to open a link to a Web site and download a file that will secure and 'patch' their PCs. The fake Web site, which is hosted in Australia, looks almost identical to Microsoft's and the download is actually a Trojan horse — a program that can give hackers remote control of a computer.



"The email won't be picked up through anti-spyware software because the file does not contain spyware signatures that would be used to identify it as potentially harmful," said Martino Corbelli from SurfControl. "Anti-spyware software tends to scan URLs and attachments in suspicious emails, but because none of the recognised spyware signatures are present here, there's no way this approach could identify the threat."



SurfControl said that the Trojan advertises an infected computer to hackers so it can become part of a botnet — a network of thousands of hacker-controlled computers typically used for illegal activity, such as spamming.



The Trojan installs an executable file into the Windows directory. When it is running, the program takes up all the processing power of an infected computer by forcing it to perform continuous tasks.



Microsoft said on Friday that it is looking into the situation.
Reply
#2
http://www.vadavaka.com/forums/index.php?a...t=ST&f=8&t=4165
<@Miagi> !8 Am I spamming?
<@ChanServ> Miagi: Yes.
<@Miagi> !8 Should I stop?
<@ChanServ> Miagi: Oh, please, PLEASE, make it stop!

Reply
#3
Its been said before and I will say it again. NEVER EVER install any patches offered to you via e-mail or IM or off a forum.

Companies will never send patches out like that.
Reply
#4
Miagi,Apr 13 2005, 10:33 PM Wrote:http://www.vadavaka.com/forums/index.php?a...t=ST&f=8&t=4165
Just making sure that people know ^_^
Reply


Forum Jump:


Users browsing this thread: 2 Guest(s)