Topic: Don't install Outlook patch

[Clive]

An email claiming to alert recipients to a patch for a vulnerability in Outlook is a hoax, security experts have warned.

The emails appear to come from Microsoft and have the subject line "Microsoft Security Bulletin MS07-0065". They warn of a flaw in Outlook that has been used to infect 100,000 PCs and turn them into spambots.

"Security bulletins from Microsoft describing vulnerabilities in their software are a common occurrence, and so it comes as no surprise to see hackers adopting this kind of disguise in their attempt to infect Windows PCs," said Graham Cluley, senior technology consultant for Sophos.

"By using people's real names, the Microsoft logo, and legitimate-sounding wording, the hackers are attempting to fool more people into stepping blindly into their bear-trap," continued Cluley.

The email contains a link that directs you to a website with a patch for the problem, which is in fact a Trojan horse.

"Users need to be on their guard against this kind of confidence trick or they risk handing over control of their PC to hackers with criminal intentions. They should also ensure that they are downloading Microsoft security updates from Microsoft itself and not from any other website," Cluley said.

www.sophos.com

[mistybear]

I got one recently from PayPal asking me to verify my details, and it was dated 28th Dec. 1899.

Obviously I didn't respond, but I did forward it to PayPal.

[Clive]

E-mails sometimes go astray MB but always turn up eventually!   

I had a beauty today by snail mail from the Spanish Lottery to say I'd won around £500,000.  I had to fill in a form supplying my bank details, mother's maiden name, and supply them with a photocopy of my passport and driving license.   

[mistybear]

I wonder how many people do supply all these details?

The computer store that I bought Michaels new case from, wanted me to give a photo copy of my drivers license to the fellow picking it up. This is after me paying for the case with my visa card.

How stupid do these people think we are........

I told him the name of the person picking it up, and said "how many people by that name will be picking up an Antec nine hundred case and paid for by me, on thursday afternoon around 2.30pm?".

He said the invoice number would be enough.

[Clive]

There does seem to be an awful lot of very naive people around if figures I saw last week are accurate.  According to a news bulletin, residents of the UK alone lost hundreds of millions of pounds through such scams.  Many of them are old people which makes it doubly sad.