Fake Windows Update Email

Well Microsoft believes that the grace period is over and wants everyone to jump on board and get Service Pack 2 (SP2) installed. I know everyone has an opinion on the Service, some good some not so good, but it really is only a matter of time. Do you know anyone without SP1 on his or her XP machine? I hope not.

As you may also know, Microsoft has picked the second Tuesday of the month to run their new security patches. These two issues have really set the stage for a new attack on windows users. Hackers have decided to try and slip one by your defenses with a Phishing/Trojan scam. You may get a spoof emails that link to a bogus Microsoft site where the hackers get you. If successful in their efforts, the ambushed PC will be infected with the TrojDSNX-05, a back door Trojan that attempts to gain control over your system. With control of your system the hacker will more than likely use you (of course unknowingly) as a spam server to mail out huge amounts of spam in your name. If a network PC happens to get infected, then a denial of Service, exploitation of network shares, and further infection are something you may look forward to.

The TrojDSNX-05 is not the newest virus on the block and can be controlled if you have decent anti-virus software that is up-to-date.

Microsoft will never send you an email reminding you to update.

Very similar to the fact that companies will never send you an email asking you to reply with your credit card and account info in order to fix some discrepancy with your account. In fact, if you ever receive any emails that seem "Phishy" to you, try going directly to the company web site (not the link in the email) and see for yourself what's going on.

As far as SP2 goes, if you haven't installed it yet I suggest doing it on your own terms, backup all your important data (pictures of the family, documents, whatever is important) set a system restore point. Go out to the manufacturer's site of your favorite programs and see if there are any known issues, FAQ's, or patches. If so, follow the instructions to properly install any necessary components and follow any necessary procedures in the exact manner in which the instructions describe. After this you should have all your bases covered, and feel comfortable installing SP2.

Email Security Scan Tips

The problem with all the security holes that arise from day to day is that it's hard to keep up. "Am I protected?" you wonder, "I update constantly, I scrutinize all my email messages, especially attachments, and read all of Chad's awesome security articles, but how do I know for sure?"

Well, since such a large number of security holes center around email I'm glad to announce today a service that can check your system for potential exploits. The service is a web based email scanner that you can tailor to send out over 20 different emails, each attempting to defile your system with dummy exploits. It's like hiring a security agent to go over your system and tell you what aspects of your security is in good shape, and what areas could use some improvement. When set in motion, the scanner fires off the dummy virus and exploits to the specified email address. Don't be surprised if your virus software starts popping up with security messages, as a matter of fact, this is exactly what you want to happen it means your system is seeing the threats coming in.

The emails themselves have message bodies describing what their particular test was for and how to make sure you're protected from this sort of attack. Some of the emails have attachments and some attempt to create text documents on your desktop, the emails tell you exactly what to do to ensure the tests ran correctly, thus providing an accurate assessment of your system's defenses.

In addition to the testing your system for security holes this is also a good way to educate yourself on some email-born security issues by getting a chance to see them in action without putting yourself in any danger.