That 'new Windows 10 update' could be packed with ransomware (and probably IS)

TechRadar Pro ^ | Nov 22, 2019 | nthony Spadafora

[dayglored]

This looks like a nasty one.

Microsoft DOES NOT SEND UPDATES BY EMAIL!

[dayglored]

Windows 10 Update Malware/Ransomware ALERT... PING!

You can find all the Windows Ping list threads with FR search: just search on keyword "windowspinglist".

[softengine]

Yep. Sorry. People who fall for this do not get my sympathy.

[TChad]

Why don’t all email programs have an option to block executable attachments?

[dayglored]

> Why don’t all email programs have an option to block executable attachments?

Oh, they do have that option, usually by default. And all reputable ISP's with mail servers block them too.

But some slip through, and users click on them.

Hell, nearly half of American voters vote for Democrats. You're surprised they click on malware too?

[LibWhacker]

Targeted users first receive an email with either the subject line 'Install Latest Microsoft Windows Update now!' or 'Critical Microsoft Windows Update!' which is already suspicious as Microsoft pushes Windows updates through its operating system and never through emails.

Yes, an e-mail notice from Microsoft is a dead giveaway, but also the tone is all wrong, almost hysterical. Big companies generally don't put out crap like that. If there is any question, go to the MS website and see if the update is listed. Last, you are extremely unlikely to be the first person targeted, so Google it; others will already be talking about it and putting out dire warnings if it's fake.

[TomGuy]

If you value your data, BACK IT UP!!!! External USB hard drives are very cheap.

Also, image your OS partition occasionally and especially after major updates. There are numerous programs available — some of them ‘free’ for home use. Images have saved me several times over the years.

[a fool in paradise]

Microsoft and Google dont ask if you want an update

“It’s for your own good!!!”

[daniel1212]

Yes, an e-mail notice from Microsoft is a dead giveaway, but also the tone is all wrong, almost hysterical.

As with "Windows Technical Support Dept." From India.

[GOPJ]

Thanks for the ping.

[Lurkina.n.Learnin]

“Also, image your OS partition occasionally and especially after major updates. There are numerous programs available — some of them ‘free’ for home use”

Why doesn’t Microsoft supply imaging software with their OS?

[TChad]

Oh, they do have that option, usually by default.

Outlook does, but AFAIK Thunderbird does not.

I wonder if this new malicious attachment really does have a jpg extension, or if the filename something like filename.jpg.exe.

[dayglored]

Could be filename.jpg.exe and depending on the user default setting to not display the file extensions.

I’ve never understood that being the default. So stupid. And 25 years after we all knew it was a bad idea, it’s still the default.

Worse, Apple (Mac) does the same thing. Actually the Mac did it first and Windows just copied it. Stupid and dangerous.

[TomGuy]

Why doesn’t Microsoft supply imaging software with their OS?

Windows does have some kind of imaging and also back-up. I used them some, but the 'restores' seemed cumbersome. I found 3rd party easier to use.

[TChad]

Stupid and dangerous.

Yes.

[TomGuy]

I use a program called Mailwasher to preview email. I can usually tell whether an email is legit. I frequently get emails that are spoofs of my ISP. Occasionally, I get spoofs of other websites, such as Paypal.

My ISP does catch a lot of spam before it even gets to my ISP email inbox, but some slip through.

https://www.mailwasher.net/

[montag813]

What kind of retard doesn’t know how to use Windows Update, after 20 years?

[dayglored]

You would be amazed.

What kind of retard votes for Democrats, after decades of evidence of the damage they cause?

[TChad]

Mailwasher looks like a good option for people with ISPs that do not filter spam well. It does not appear to do what I asked about, which is to filter executable file attachments.

[Bob434]

what if i get a call from a ‘microsoft technician’ telling me to open the microsoft email? Is it safe then? (J/K)