There are worms to fake Microsoft patches again

Security firm Sophos has warned of the emergence of a new Stration worm computer variant in the form of fake Microsoft security updates.

Sophos's latest report confirms that the Depatio-AN worm variant is spreading at a very fast pace.

' The deep variant Stratio-AN has been strongly dispersed since the early morning on Monday. The main distribution of the Stration worm variant is still email, but in many different forms of spoofing. Among them is a fake email that warns users that their system has been infected with a computer worm and is continuously sending emails containing computer worms. Email recommends that users should quickly install the attached 'KB7859-x86.zip' update. But in fact 'KB7859-x86.zip update' is actually the Stration-AN worm variant . "

There are worms to fake Microsoft patches again Picture 1 Sophos said that the risk of users being infected with new Stration worm is relatively high because the worm uses attack methods to address users' concerns about security issues, especially security errors. The password has not been fixed in Microsoft products.

' A lot of users are now anxiously waiting for Microsoft's VML patch update while malicious code is likely to attack this security flaw, ' Sophos said. ' It seems that the people behind the worm variant Stratio-AN have sniffed this user's concern and used it as a means to spread this worm .'

Graham Cluley - Sophos' senior technology consultant - confirms that emails contain new variants of the Stration worm that have strongly attacked email gateway servers to target any PC system. that it can. Users who just need to neglect a bit can get the new worm.

Cluley recommends that users should not open unsolicited emails and regularly update security applications on the system. Users should also not download and install any patches from unofficial websites. Otherwise they will face the risk of being attacked.

' A legitimate software company never sends you email notifications about new security updates, but often users have to go to their own websites to find security updates .'

Hoang Dung