Fake Microsoft Security Bulletin Alert!

R

Rich Tate

Supreme [H]ardness
Joined
Jun 9, 2005
Messages
5,955
If you get an e-mail warning you about a Microsoft Outlook zero-day exploit just delete it. It is simply another phishing scam.

The Security Bulletin (MS07-0065) it points to doesn’t exist. And just because it can never be said too often, I’ll say it again here. Microsoft does not alert users to security issues via e-mail. Ever. That’s what Windows Update is for.
Click to expand...
 
Heh. My work posted about it a couple days ago. Great timing since about half of our branches have migrated to Outlook so far.
 
That's not completely true. MS does have a mailing list specifically for their monthly patch releases (I'm on it, and I get a second copy via the Full-Disclosure list), PGP-signed and with links to the relevant bulletin pages. However, they never provide direct download links to the patches, nor cite your name or license key as this faux bulletin is doing.
 
Primus said:
That's not completely true. MS does have a mailing list specifically for their monthly patch releases (I'm on it, and I get a second copy via the Full-Disclosure list), PGP-signed and with links to the relevant bulletin pages. However, they never provide direct download links to the patches, nor cite your name or license key as this faux bulletin is doing.
Click to expand...

True, they email you whenever WSUS updates are coming down and you'll need to approve or disapprove them.
 
You must log in or register to reply here.
Back
Top