With Windows 7 ending support this month, organizations moving to or already on Windows 10 need to be wary of “update” phishing scams intent on installing ransomware.
Nearly every user of Windows today is aware of the need for the operating system to update itself. So, when receiving legitimate-looking emails with subject lines like "Install Latest Microsoft Windows Update now!" or "Critical Microsoft Windows Update!", it’s not a stretch of the imagination to envision a user following malicious instructions in the name of wanting to keep their system updated.
But security researchers at Trustwave have found multiple instances of phishing emails disguised as updates in the wild that, when clicked, download and install Cyborg ransomware.
As with most phishing attacks intent on installing malware, this one creates a sense of urgency, establishes legitimacy through its email content, and urges the user to respond by double-clicking the attachment – in this case a malicious .NET downloader. Picture Source: Trustwave.
Users need to gain a sense of the need to always being vigilant when interacting with email. Putting users through continual Security Awareness Training is the most effective way to teach them why practicing good cybersecurity is important, how to spot phishing attacks, and what to do (and not do!) should they receiving a potentially malicious email.