Fake Microsoft update comes via email

Trend Micro blogged a couple of days ago about mail which has a fake Microsoft update included as an attachment.

Message itself looks pretty authentic with even included PGP signature and tells that Microsoft sends this update privately to prevent making more malware because of update.

If users runs attachments it adds itself to start automatically while Windows starts and attempts to download more malware.

After that it opens several ports which allows attackers to execute files, steal information from computer, or upload and download files.