Fake Microsoft Security Bulletin Emails

I noticed only today a number of fake security bulletin emails supposedly from Microsoft asking you to update your PC with a critical patch and conveniently added a link for you to download an executable that will install malware on your system. Don’t be FOOLED. Microsoft doesn’t send out updates via email so if you receive the email DELETE it.

Here is an example of what you might receive in the email.

Microsoft Security Bulletin MS06-8447
Cumulative Security Update for Internet Explorer (6063139273)
Published: September 9, 2007

Version: 2.0
Summary

Who should read this document: Customers who use Microsoft Windows

Impact of Vulnerability: Remote Code Execution

Maximum Severity Rating: Critical

Recommendation: Customers should apply the update immediately.

Security Update Replacement: This bulletin replaces several prior security updates. See the frequently asked questions (FAQ) section of this bulletin for the complete list.

Internet Explorer for Microsoft Windows XP Service Pack 2 – Download the update <– THIS IS THE VIRUS LINK

Revisions:

V1.0 (September 9, 2007): Bulletin published

Further information about Microsoft security can be read at http://www.microsoft.com/protect/yourself/phishing/msemail.mspx