|
Posted by Martha Adams on August 21, 2008, 10:55 am
If you were Registered and logged in, you could reply and use other advanced thread options
>>Martha Adams wrote:
>>> Noted in my email this morning: a purported message
>>> from Microsoft Security Update with a URL for me to
>>> follow-up immediately for a "critical update." I
>>> googled on the "originating IP" number and found no
>>> hits. This number is,
>>>
>>> 67.202.19.184
>>>
>>> Does it ring a bell with anyone here? ??
>>>
>>> (I didn't try this ...opportunity.)
>>>
>>> Thanks -- mha [comp.security.misc 2008 Aug 21]
>>>
>>>
>
>>the ip range belongs to amazon...doesn't mean much, except one of
>>those thousands of possible computers is infected and
>>is being abused for spaming.
>
>>more interesting is the url/IP they want you to go to...
>
>>OrgName: Amazon.com, Inc.
>>OrgID: AMAZO-4
>>Address: Amazon Web Services, Elastic Compute Cloud, EC2
>
>
> Its doubtful that anything at Amazon is infected. The EC2 is a cloud
> of machines that anybody can rent cheaply and with virtualy no
> questions asked to run anything on. You can complain to them to the
> abuse contacts (which I cut out of your original).
>
> I would guess that several sysadmins are just blocking all the AMazon
> EC2
> IP ranges for email because there's been several times that abuse has
> come
> out of there...
Well, for anyone who is interested, here is the whole
message:
Dear Microsoft Customer,
You are receiving this message because your version of Microsoft Windows
is affected by a dangerous security vulnerability.
In order to prevent possible risk of system instability, Microsoft urges
you to update at your earliest convenience.
We are providing a free update to all Windows users.
You can update your system for free by visiting the offical website for
this patch, at
http://customerservice.system-updates.net/?businessrelations
Thank you for your understanding in this matter.
Regards,
Cathy Rhoades
Business Relations Representative
Microsoft Corporation
http://customerservice.system-updates.net/?businessrelations
(Copy ends.)
I haven't tried to follow this url because I don't
feel ready to cope with possible consequences.
Cheers -- mha [comp.security.misc 2008 Aug 21]
| 
XML site map