Spoofed Microsoft Outlook Critical Update spammed in email

re: Spoofed Microsoft Outlook Critical Update spammed in email

Richard South — Thu, 25 Jun 2009 09:08:20 GMT

Thanks, that email is arriving with current (25/06/09) date.

Your infor has allowed me to issue warning with confidence to my collegues

re: Spoofed Microsoft Outlook Critical Update spammed in email

Filo Hirota — Wed, 24 Jun 2009 12:31:15 GMT

Good that I found this page. Otherwise,there is not way to know that the mail was spoofed. Is there anyway that Microsoft could alert its users of this kind of danger?

re: Spoofed Microsoft Outlook Critical Update spammed in email

SARGE — Tue, 23 Jun 2009 15:23:56 GMT

Useful info.

with regards to

"best practice of hovering over email links would reveal a different one than shown in the document."

i noticed the real microsoft link begins:

"http://update.microsoft.com"

however in this instance they've snuck in "llik1i" after the word microsoft. (as per below)

"http://update.microsoft.llik1i.com"

i'm guessing they chose l's 1's and i's as they are the thinest characters on a keyboard

may they die horribly.