A fake e-mail message purports to be a Microsoft security notification about problems with the Windows operating system. The message, which carries the subject line "MS Windows/Critical Error," attempts to fool PC users into downloading and installing an attached program. However, numerous spelling and grammar errors in the message could tip people off to the danger.
"In the libraries of OS Windows(r) critical errors have been found," reads the e-mail message that contains the Trojan horse attachment. "This errors lead to destruction of the system files from your computer without an opportunity on restoration."
The attached executable file, named Windowsupdate.rar, appears to be a Windows archive file, a format used to install code on PCs. Antivirus company Symantec said the file is not listed in the virus database, so it's unclear whether the file is a virus, a prank or any other kind of attack.
Microsoft declined to comment on the threat. But the scam is common enough that the software giant has created a Web page to answer Windows' users questions. The company notes on that Web site that it never sends updates as attachments to e-mail messages.
"We never attach software updates to our security e-mail notifications," the software giant stated on its site. "Rather, we refer customers to our Web site for complete information on the software update or security incident."
The software maker typically delivers patches through its Windows Update service, or through downloads from its Web site.
Old News! SUS was improved due to similar emails last year - this is just the next variation of phishing trojans, as predicted by Gartner.