Security update scams

[Richard Brekne]

Just in case anyone is not aware of this one yet... From PC Plus
Magazines security desk :

Fake security updates
                                  Has Microsoft sent you a security
update?
                                  We received an interesting e-mail a
couple of days ago. The subject line was
                                  "Internet Security Update" and it was
supposedly sent by the MS Internet
                                  Security Center. Enclosed was an
executable file. It looks fairly genuine at
                                  first glance and the URLs quoted in
the text did indeed go to Microsoft's
                                  website. Needless to say it is a fake,
Microsoft never send updates via
                                  e-mail. The attached file actually
installs mucks about with your Registry,
                                  opening your system to possible remote
access, and propagates itself by
                                  plundering your address book. It's
goes by the name W32/Gibe-A.
                                  Remember, Microsoft never sends out
anything like this and certainly never
                                  sends security updates by e-mail.

                                  12th March 2002

                                  Chris Lloyd
                                  Site Editor

--
Richard Brekne
RPT, N.P.T.F.
Bergen, Norway
mailto:rbrekne@broadpark.no
http://home.broadpark.no/~rbrekne/ricmain.html