I received an email yesterday that was very official looking. It claimed to be from Microsoft. It even had links to Microsoft’s support, products and services.
The email said that the attachment contained an important security upgrade for Outlook Express and some other programs.
The name of the attachment was something like patch123423.exe
Anyways, I was smart enough to go to the Microsoft Homepage and read that…
The message contains no attachments. Authentic Microsoft Security Bulletin notifications never include software updates as attachments. Rather, we refer customers to the complete version of the bulletin on our Web site, which provides a link to the update. Most Microsoft software updates are made through Microsoft Windows Update, Microsoft Office Update, or the Microsoft Download Center.
Look out! Be vigilant!