A new worm called Sober.d is doing the rounds masquerading as a security patch from Microsoft. arrives in an e-mail message with a subject that reads "Microsoft Alert: Please Read!" (The worm also comes in a German flavor, with a matching headline of "Microsoft Alarm: Bitte Lesen!")
If the recipient launches the attachment, the worm scans the PC to see if it's already infected. If not, Sober.d displays a dialog box titled "Windows Update --MS-Q4232361791-" with the message: "The patch has been successfully installed."
If the computer has been infected, the dialog's message changes to: "This patch does not need to be installed on this system," giving users an even greater false sense of security
Can Your EDR Spot the Attack?
Enterprise-Class Cloud & Network Monitoring
Threat Traffic Analysis
Wi-Fi Key Generator
IT Infrastructure Monitoring
Follow Firewall.cx
Recommended Downloads
Cisco Password Crack
Decrypt Cisco Type-7 Passwords on the fly!
Automated Patching Solution
Firewall Analyzer
