Microsoft Spoof Email

I have discovered that there is a dangerous fake email supposedly from Microsoft.

Please delete without opening the attachment!

The e-mail comes with an attached executable.

The e-mail comes with an attached executable, which it claims is the latest security update, and encourages the recipient to run the attached executable so they can be safe.

While malicious e-mails posing as Microsoft security notifications with attached malware aren’t new (we’ve seen this problem for several years) this particular one is a bit different in that it claims to be signed by Steve Lipner and has what appears to be a PGP signature block attached to it.

While those are clever attempts to increase the credibility of the mail, I can tell you categorically that this is not a legitimate e-mail: it is a piece of malicious spam and the attachment is malware.

Specifically, it contains Backdoor:Win32/Haxdoor.

Security