MX Lab intercepted some messages coming from the Microsoft Update Center < This e-mail address is being protected from spambots. You need JavaScript enabled to view it >, an emailaddress that is obviously spoofed, with subjects like:
* Install Update for Microsoft Outlook
* Microsoft has released an update for Microsoft Outlook
* Microsoft Outlook Critical Update
A screenshot of the message shows that the lay out and contents is based on typical Microsoft communications regarding KB articles from the past.
The link hxxp://update.microsoft.com.rrref1akz.eu/microsoftofficeupdate/KB910737/default.aspx?ln=en-us&email=vehwz@****.com&id=**** will take you to a server that hosts malware. Unfoutunalty, the servers where already down so we couldn’t get our hands on the malware files to investigate this further.
