Hackers are now using Microsoft’s well-known Tuesday security patch release as a vehicle for spreading malware and spywares across the web users.
A number of Microsoft Software users have reported receiving ‘spoofed’ emails claiming to be from Steve Lipner, Microsoft’s security assurance director.
One of the emails includes an attached .exe extension file, which claims to be “an experimental private version of an update from all Microsoft Windows OS user”, actually contains malware.
Microsoft warned its users not to open the attached document, even if it claims to “help protect your computer against security threats and performance problems”, as installing the document would release a Trojan horse that would infect your PC.
In addition, the software giant maintains that it never sends out security patches in form of email attachments.
Microsoft urged the recipients not to click the links given in the spoofed emails and warns, “Those links might be spoofed so that they appear to send you to a legitimate website when they actually send you to a malicious one.”