Do you have a Phishing Education Program in your Business?
I received this message earlier this week in my inbox. Interestingly enough, this is the first Microsoft patch-specific phishing attempt I've gotten in a while. The message is an obvious fake -- to we who are familiar with phishing attempts. But, are your employees similarly educated?
Do you have an "Appropriate Internet Use" and/or "Dealing with SpyWare, AdWare, Viruses, and Phishing" education program in your company for your employees? If not, consider developing one. It doesn't take much to put together a PowerPoint slide deck that details examples of what to watch for. And, tell employees to never, ever click on any link that ends in a .EXE!
Read on for the text of the message...
Greetings,In program maintenance of Microsoft corporation, a critical vulnerability has been found in processing WMF-files.
Exploits using the "SetAbortProc" GDI function were discovered in May 2007.
The function, which registers an error handler normally intended for use when a print job is cancelled during spooling, allows arbitrary code added to a WMF image to be executed without the permission of the user.Microsoft has now released a critical update for Windows 98/2000/XP and Vista and it is very important that you download it.
We urge you to update your Windows operating system with the patch attached, to prevent malicious users from compromising your systems security.Our patch is downloadable via the Windows update center, or directly from {{web site link removed}}.
Thankyou for your cooperation.
With kindest regards, the Microsoft Customer Support.
Email This!
Digg it!
Sphere it!
Del.icio.us
Reddit!
Newsvine