Security blogger Graham Cluley is senior technology consultant at Sophos. In his post today, he has an important alert for Microsoft users:
Beware any emails which claim to come from email@example.com – it could be that you’re being targeted in an attack designed to steal your AOL, Gmail, Yahoo or Windows Live password.
At first glance, if you don’t look too carefully, the emails entitled “Microsoft Windows Update” may appear harmless enough. But the grammatical errors and occasional odd language should raise alarms bells that the emails may not really be from Microsoft.
Here’s what it looks like:
Dear Windows User,
It has come to our attention that your Microsoft windows Installation records are out of date. Every Windows installation has to be tied to an email account for daily update.
This requires you to verify the Email Account. Failure to verify your records will result in account suspension. Click on the Verify button below and enter your login information on the following page to confirm your records.
Microsoft Windows Team.
Read the rest of his post here. And remember to take care. Be suspicious of unsolicited emails, and always think carefully before entering your webmail passwords.