New Fake Microsoft Security Updates

Once again, attackers are sending email messages designed to look as if they're from Microsoft, directing you to a Web site designed to look like the Microsoft site, where they hope you'll download a "patch" that actually installs a Trojan on your computer. The Trojan allows the hacker to take control of your computer remotely.

This is especially dangerous because the message comes near the "Patch Tuesday" day when Microsoft issues its monthly security updates, thus fooling many users into thinking it's a genuine notice. Don't be taken in by this scam, and be sure to warn other PC users who may not be technically savvy that Microsoft does not ever distribute their security updates through e-mail links in HTML mail. Read more here:
http://www.winxpnews.com/rd/rd.cfm?id=050412SE-Fake_Updates

The Real Thing: Microsoft Security Bulletins for April

Microsoft has issues its advance notification to let you know that a number of security bulletins will be released on Tuesday, April 12th. These include five Windows update, one for Microsoft Office, one for MS Messenger, and one for Microsoft Exchange. An updated version of the malicious software removal tool will also be released, along with a couple of non-security related updates for Windows. On Wednesday, April 13th, there will be a Webcast discussing the technical details of the April security bulletins. You can get more info here:
http://www.winxpnews.com/rd/rd.cfm?id=050412SE-MS_Updates

I'm not ignorant, I just need more learning!

Thanks for the info, Tammy.

A good rule of thumb to avoid getting scammed like this is "don't participate in any transaction that you did not initiate."

That means don't download anything from or give any information to any website you get to by clicking on a link (or even typing in the url manually) from an email. The email initiates those transactions, not you. If you think an email like these fake Microsoft ones is legit, browse to the website manually. Don't just type the full URL from the email either. Go to the main webpage of whatever site you're being asked to go to - www.microsoft.com, for example. If it is legit, you will be able to do whatever the email is asking you to do - download a patch, login to your online banking, etc. If it's not legit, you'll find out pretty quickly.