RE: [Full-Disclosure] FW: Last Microsoft Patch

[Chris DeVoney]

Title: Message

Others will address the virus represented in this trojan e-mail, but MSNBC is the domain for the Microsoft-NBC news web site. The pure illogic of sending out security outdates from a domain for news/weather/sports is pretty strong. So was using MSN.COM, their internet service, as a domain. If the masqueraders had used Microsoft.com, it may have been a more believable trojan (except that Microsoft states repeatedly they NEVER e-mail outdates).   cdv   -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Curt Purdy Sent: Wednesday, October 15, 2003 12:05 PM To: [EMAIL PROTECTED] Subject: [Full-Disclosure] FW: Last Microsoft Patch Anybody else get this?  Looks legit, originating address is from msnbc.com.  But can't believe even Microsoft would be this stupid after the rash of trojan-attached "patch announcements" lately.  Plus all security people have been saying that Microsoft would never email a patch out.  Or are they thinking, "Send this out so all the stupid people will click on this before they click on a real trojan?