Beware of fake Microsoft patches in scam emails

[Wiz Feinberg]

I want you all to be aware that scammers are sending out fake Windows patches again, in spam email runs. The messages look like official Microsoft emails, and may contain images pulled from Microsoft and have forged Microsoft email addresses in the headers.

The new scams have an attachment with a zip file, which contains a Trojan Hrose program, currently identified as TROJ_AGENT.AZZZ and also a clickable link to another downloadable Trojan, named: TROJ_AGENT.AZAZ. This information comes from reverse-engineering captured emails in a honeypot, at Trend Micro.

So, if you should receive one of these messages, claiming that they got your email address from your registering MS Office, or another MS application, delete, delete, delete!