Cybersecurity Penetration Testing Subjective
May 19, 2013

Should I run an update or patch I receive in e-mail?

Detailed Explanation

Today, many viruses and worms are distributed through e-mail, and to help make the virus spread even more, the virus or worm may make itself look as if it is coming from a legitimate source such as Microsoft. Below are basic examples of what this e-mail may look like

Warning, we have detected that your computer does not contain the latest Microsoft updates. To help keep your computer updated and secure run the attached patch.exe file to update your computer.

Microsoft Support Group
support@microsoft.com

or

Warning, we have detected that your computer does not contain the latest Microsoft updates. To help keep your computer updated and secure visit the below link.

http://microsoft.fakesite.com

Microsoft Support Group
support@microsoft.com

Although these above e-mails may appear legitimate by signing the e-mail from Microsoft, sending the e-mail from a Microsoft e-mail account, or even pointing to a URL that has Microsoft, it is very likely that the e-mail is not legitimate.

The fact is, a large company such as Microsoft, Norton, McAfee, Dell, Compaq, etc. is not going to distribute mass e-mails to users, especially an e-mail that contains a file. If you believe that your computer, Operating System, or software program needs updates, you should visit the company's official page to obtain the updates. See the listing of computer companies if you would like to find the official web page of a company.

Note: If you have signed up for a company's newsletter or mailing list, it is possible a company may be sending you e-mails. However, it is still very unlikely for the company to distribute attachments with the e-mail.

I am receiving dozens of these e-mails in my mailbox, how do I stop from receiving these messages?

Unfortunately, these messages are sent from computers that are infected with a virus or by the virus creator who wishes to spread the virus. Because your computer is not the infected computer, it makes it difficult to stop these e-mails from coming. However, we have listed a few recommendations below that may help eliminate the problem.

  1.     Many Internet Service Providers will help its users by filtering out any virus e-mails or SPAM from the mail server. You may wish to contact your Internet Service Provider or your company hosting your e-mail requesting that these e-mails be restricted from the mail server or filtered.
  1.     Many times this virus is coming from a contact, friend or family's computer that is infected with the virus. You may wish to contact all your personal contacts requesting they make sure they are up to date on their virus protection programs.
  1.     If all else fails, setup an e-mail filter or rule with your e-mail client to automatically deletes these messages. This will help allow you to not have to manually delete the e-mails, but this will not resolve any issues you may be having with your e-mail box becoming full on the server.

 

Discussion (0)

No comments yet. Be the first to share your thoughts!

Share Your Thoughts
Feedback