Thursday, January 07, 2010

Infection: Web Mail Security Settings Updated

You get an email like the following stating there have been security changes to your email account. These come in all the time for various web bases email systems (hotmail, yahoo, outlook express web mail, etc. also if you are wondering the screen shot is from Thunderbird 3):


(click to enlarge)

So I copied the link, and went to the page to do some research, and this one is an Outlook Web Access (bogus) page. Prompting me to download the "settings-file.exe" (which Avast! immediately caught even before I coult click the download button and stated it was a Trojan).


(click to enlarge)

Rules of road...

If you get an email like this stating there were security settings applied to your email account, do not click on the link in the email. Instead manually log into the web site with the address you know, if there are any you will then be prompted.

At least 80% of these "Email Security Update Mails" are bogus, coming from the scum that have nothing better to do then to cause misery for others in attempts to steal account information.

Meanwhile, just mark this as junk, and keep moving forward.

0 comments: