(Another) Bogus MS Security Update Circulates

"Not again?!" Yep, again..

- http://www.techweb.com/wire/security/163105391
May 18, 2005
"…Official-looking e-mail…

Microsoft has been the butt of so many such hoaxes that it's posted a lengthy document, "How to Tell if a Microsoft Security-Related Message is Genuine," on its Web site. The document includes a screenshot of an earlier edition of the same bogus e-mail."
- http://www.microsoft.com/security/incident…icate_mail.mspx

FYI…yep, another one:

- http://www.websensesecuritylabs.com/alerts…php?AlertID=228
June 28, 2005
"Websense® Security Labs™ has received reports of a new wave of email scams disguised as Microsoft Security Bulletins. Users receive an email message which urges the immediate installation of a cumulative security patch. Users who execute the Trojan become infected with an SDBot variant, which is currently undetected by major anti-virus vendors. This Trojan/Bot allows complete unauthorized access to the machine.
>>> Sample email body:
"Microsoft Security Bulletin MS05-039: New patch against W32/Sober, W32/Zafi, W32/Mytob.
Issued: June 26, 2005
Updated: June 26, 2005
Version: 1.0
Summary
Who should read this document: Customers who use Microsoft Windows
Maximum Severity Rating: CRITICAL …"


>>> Please note that MS05-039 does not yet exist. <_<