eWeek Microsoft Watch
Advertisement
Advertisement
January 22, 2008 3:36 AM

WGA Update Goes Phishing



News Brief. Uh-oh. Sunbelt CEO Alex Eckelberry says there is a new Windows Update spam mail out in the wild.

The message uses a little Windows Genuine Advantage fearmongering to cajole end users to download a fake update that really is a backdoor Trojan. The message warns: "Please update your P.C. in maximum 12 hours otherwise your Windows will be Expired."

Windows is going to expire all right, after it has been eaten by RATs, as in remote-access Trojans.

Microsoft doesn't solicit updates via e-mail. But how many people won't know this?

Now that my teenage daughter is doing MySpace, I've reduced her Vista privileges. She gripes about my having to enter in administrator passwords, but malware-spiked MySpace pages and phishing e-mails like the aforementioned one have me concerned.

The behavioral change is surprising. My daughter now is much more aware about all kinds of software installations, including routine iTunes updates. She's annoyed, but that might be good security training for her in the end.

My security advice: If you're old enough to have teenagers, don't trust them or your parents. Sure as you can say fake Windows update spam, their PCs will be RAT infested. If they're Windows users, get them on Vista and reduced privileges.

TrackBack

TrackBack

http://www.microsoft-watch.com/cgi-bin/mte/mt-tb.cgi/12527

Comments (16)

ike :

What does have to do with Vista bloat ware?

The same protection can be achieved using XP, just don't give the little brats administering rights in XP.

Tom Berber :

Most of what's worth reporting about VCSY is contained in its latest 10-Q. You can find it at:
http://yahoo.brand.edgar-online.com/fetc...

This is the report where VCSY talks about its negative cash flow and how its debts are many times its assets. That report also offers choice tidbits like:

>

also

>


In summary, the company has been losing money consistently. It has not paid its payroll taxes. The 10-Q also shows that the company is in default on many loans. Read it carefully. It shows in exceuciating detail why I-Man is so desperate.

Polar Bear :

I agree with Karl, she should have gone with the Mac. I just recently switched over to the Mac and absolutely love it, never again am I looking back on using Windows Vista. Goodbye spyware, viruses, and Windows annoyance.

good riddance :

goodbye polar bear.Good riddance..We don't want users who doesn't know how even the basics of using a PC.

Brian :

If the warning "Please update your P.C. in maximum 12 hours otherwise your Windows will be Expired." is quoted exactly as it appeared, then it screams "PHISHING!" at the top of its lungs. Poor grammar, poor phrasing, poor punctuation, and poor capitalization are dead give-aways. Who is naive enough to be fooled? And yes, Microsoft doesn't send ever out emails like this.
Mac and Ubuntu don't seem to be in the crosshairs yet, and can be worthy alternatives. But this painfully obvious phishing attempt isn't fooling anyone who has any knowledge of how to use a PC. And it definitely isn't a black mark against Vista.

chips :

What I know is the learning curve to work with an XP limited account is very high, and maybe, just not worth it. As the limited accounts in Windows, were not setup like the limited accounts in Linux. In Linux, you can still do everything, but limited accounts in Windows, were setup, not to protect your system, but to limit the user, on which apps they could run in a business environment.

For example, just to burn a cd in a windows limited account will take some work and setup, in a Linux limited account, you can already do this. There are so many reasons that users do not use the limited account features of Windows, but the biggest reason, is they were not designed right.

Go with Linux or Mac OSX and save yourself all the hassle and pain. distrowatch.com will set you free.

billybob :

[quote]She's annoyed, but that might be good security training for her in the end.[/quote]

But the laptop is PINK!!!!!11!!

That has to be like waaay better than a Mac which is not PINK!!!!1!!!!

Brian :

Re: Limited accounts in XP
@chips:
You're 100% correct. Starting in Windows 95 and continuing on through Windows XP, I have found that limited user accounts were an after-thought that was hacked on top of the operating system. They did nothing to separate and protect the registry. None of the popular applications worked well with them, and few even offered the chance to try: the old unlimited-access path was the path of least resistance.
And one of Microsoft's marketing strengths is that vendors find them the path of least resistance to maximum profits. And that path of least resistance does not include the clumsy limited account facility that is hacked onto Windows as an after-thought.
On the other hand, Unix and Linux have long offered limited user accounts that are built into the operating system. They aren't bolted-on after-thoughts. Applications have to support separate per-user configurations because the built-in permissions facilities don't allow them to do anything else.
And with Ubuntu (and perhaps others; I only know older Fedora and the latest Ubuntu), there is no direct administrator (i.e. root) access. You must set up a limited user account, and then you are prompted for your password whenever administrative authority is required. It's clean, smooth, and easy.... well, as easy as any limited account can be. It's definitely much cleaner, easier, and smoother than any Windows-based limited account (95 through XP) that I've ever used.
I don't know how it is with Vista. Maybe the situation has been fixed. But I do know this: I am tired of hearing Microsofties complain that Windows has offered limited user accounts but no one bothered to take advantage of them. It's the full responsibility of Microsoft to have made limited user accounts the only way to install and access the system. Only then would application developers have followed suit. And this has not been the case up to and including XP. Microsoft has no one to complain about except the face that stares back at them from the mirror.

Marco :

Even better, freedom for your sons (or daughters)-use Linux (teach them to) and you will spend less on software and they will do so in the future as well, since Linux is the future.

Jon :

@Polar Bear
The naivety of thinking a Mac computer can't get infected with a virus is what allows hackers to cripple the systems of recent switchers. Hackers don't target Macs because they're such a small percentage of the the market, not because their harder to hack in any way. I thought everyone knew this.

Damn...

I find myself in agreement with Chips. He's right about Linux. Also, I just sold my second Ubuntu PC system.

@Jon;

Sir, you are absolutely correct in everything you've just said. I own a Mac Pro Quad-Core with the latest OSX and it is prone to crashes even more so than my Dual Core Vista 64 can ever be right now...)

I am sure Apple is updating their OS at least this is what I am getting from their Support, "Yes sir, this has been noted and brought to our attention. We shall have a fix for this..." This should be a tagline from Apple, I get this constantly from three different critical issues that I am having, and yes, I got, "You may have to re-install the operating system..." So what in the heck is the difference?

Chips, I just downloaded the Ubuntu 7.x for the 64 Bit and I am installing it on a brand new Gateway FX540XG. A clean install after wiping the hardrive out and re-formatting it for only Unbuntu. Should be finished in a few minutes, and guess what, no driver downloads and a pain-in-the butt patch updates like MS.

Karl :

"She's annoyed, but that might be good security training for her in the end. "

My stepdau malwared her computer on MySpace. It was constanly popping up p0rn. It was so bad, I had to back up her photos and music, wipe her hard drive, and reinstall from scratch. She installed the very same malware the very next day. This time, I gave her a pile of CDs and a "To Do" list:

1. Wipe your hard drive
2. Install XP Pro
3. Install drivers from motherboard CD
4. Download and install SP2
5. Go to Microsoft Update and install fixes. Repeat until there are no more (rebooting a few bazillion times).
6. Download and install AVG
7. Download and install Firefox
8. Download and install ZoneAlarm
9. Download and install OpenOffice
10. Install whatever games you still use

It was very good security training in the end. It was the last malware problem I had on her machine. :)

Brian :

@Karl:
Or, you could have given her 1 CD (instead of a pile) with Ubuntu 7.10 on it. And with perhaps one reboot (which is significantly fewer than a bazillion), the "To Do" list looks like:
1. Install Ubuntu.
2. Install additional packages, such as Adobe Flash for Linux.
3. Perhaps install the restricted drivers for video, though I am doing fine on a Dell laptop with the standard open-source Ubuntu video and sound drivers.
4. Install updates as prompted. You'll always get the latest set and they can be installed in one fell swoop. And of the many security and bug-fix (yes, BUG FIXES! What a concept!!!!) updates, only ONE has asked me to reboot.
Of course, the usual disclaimers apply, such as there is more hardware that is compatible with XP than Ubuntu (such as, sound drivers for certain pesky Toshiba laptops).
But a MySpace-with-malware type of person who is not a hard-core gamer or video production would likely find Ubuntu to be a smooth and pleasant experience. Even burning DVDs and CDs with K3B (a KDE application that works fine in the default Gnome desktop) is the one of the best and most intuitive little burner GUIs at any price.
And Ubuntu won't ever tell you that you are not genuine. And you can even set up CompViz (eye candy like the Aero interface offers, but even availble on the "home basic" version of Ubuntu for no extra charge.
But it won't give you sound on those certain pesky Toshiba Satellite laptops. *sigh*

Karl :

@Brian:
Add "Install libdvdcss and win32 codecs" to your "to do" list.
If you've read some of my other posts, you might remember that I favor Linux but need to remain current on Unix and Windows since I am a Systems Engineer by day and an Adjunct Professor (mostly I teach networking) in the evenings. I have a little network lab in my basement with an Ubuntu 7.10 server and two Windows 2003 servers. Two more boxes get whatever "flavor of the day" I need to figure out. You're "preaching to the choir." :)

Post a Comment

 
 


RSS Syndication

Advertisement
Advertisement
Microsoft Watch     Contact Us | Advertise | Site Map
Ziff Davis Enterprise