X

More Microsoft phishing attacks

Yes, Windows Genuine Advantage will be used for the hook of a phishing attack. No, we shouldn't be surprised.

Robert Lemos Staff Writer, CNET News.com
Robert Lemos
covers viruses, worms and other security threats.
Robert Lemos

Yes, Windows Genuine Advantage will be used for the hook of a phishing attack. No, it hasn't happened yet and, when it does, we shouldn't be surprised.

Several news sites carried a small item on Monday that a new phishing attack had started using the news of Microsoft's recently announced program to inhibit piracy, known as Windows Genuine Advantage, as a hook to reel in financial information from potential victims. Unfortunately, the news stories are ahead of their time.

The advisory that started the stories doesn't mention the program, but does include the text of two scam e-mail messages. The first e-mail resembles an attack reported on previously by News.com, and the second attack exploits the Windows XP Activation program, a different kettle of phish altogether, as the hook.

While some phishing attacks are hard to discern from real missives from a service provider, these are both rife with spelling errors and grammar mistakes. That should be a good clue to any recipient that the e-mail is up to no good.

So, Windows Genuine Advantage still is phish-free. But now that the word is out, expect spoof e-mails any day now.