New Email Scam Using Microsoft Updates

[canuk]

A new wave of email scams disguised as Microsoft Security Bulletins. Users receive an email message which urges the immediate installation of a cumulative security patch. Users who execute the Trojan become infected with an SDBot variant, which is currently undetected by major anti-virus vendors. This Trojan/Bot allows complete unauthorized access to the machine.

Below is a Sample email body:

Microsoft Security Bulletin MS05-039: New patch against W32/Sober, W32/Zafi, W32/Mytob.
Issued: June 26, 2005
Updated: June 26, 2005
Version: 1.0

Summary
Who should read this document: Customers who use Microsoft Windows
Maximum Severity Rating: CRITICAL
Recommendation: Customers should install the patch immediately.
Security Update Replacement: This update replaces the update that is included with Microsoft Security Bulletin MS05-038. That update is also a cumulative update.

Affected Software:
Microsoft Windows NT Server 4.0 Service Pack 6a
Microsoft Windows NT Server 4.0 Terminal Server Edition Service Pack 6
Microsoft Windows 2000 Service Pack 3 and Microsoft Windows 2000 Service Pack 4
Microsoft Windows XP, Microsoft Windows XP Service Pack 1, and Microsoft Windows XP Service Pack 2
Microsoft Windows XP 64-Bit Edition Service Pack 1
Microsoft Windows XP 64-Bit Edition Version 2003
Microsoft Windows Server 2003
Microsoft Windows Server 2003 64-Bit Edition

Download the update and patch your system.
Screenshot available within full alert details.

To see more details go here......http://www.websensesecuritylabs.com/alerts/alert.php?AlertID=228