Access member only content, take part in discussions with comments on blogs, news and reviews and receive all the latest security industry news directly to your inbox. Join now for free.
A confirmation email has been sent to your email address - SUPPLIED EMAIL HERE. Please click on the link in the email to verify your email address. You need to verify your email before you can start posting.
If you do not receive your confirmation email within the next few minutes, it may be because the email has been captured by a junk mail filter. Please ensure you add the domain @scmagazine.com.au to your white-listed senders.
Security firm Sophos is warning Windows users to beware of a fake security update scam that installs a worm in target machines.
The attack arrives in the form of a spam email that appears to come from Microsoft, warning users to update their operating system.
Anyone opening the email is advised to follow instructions, which involve installing the attached KB453396-ENU.zip file.
Microsoft never sends out such emails, instead using its own update system, but Sophos believes the scam could fool some users because it looks official.
“In the current example, they've spammed out an email containing a worm, which even quotes the real name of a senior member of Microsoft's security team - Steve Lipner - to try to fool you into believing it is genuine,” the company said on its Naked Security blog.
The emails have a subject line of "Update your Windows".
This article originally appeared at pcpro.co.uk
To begin commenting right away, you can log in below or register an account if you don't yet have one. Please read our guidelines on commenting. Offending posts will be removed and your access may be suspended. Abusive or obscene language will not be tolerated. The comments below do not necessarily reflect the views or opinions of SC Magazine, Haymarket Media or its employees.