Introduction to "phishing" attack resolution by Microsoft illegal SSL Certificate

Recently, Microsoft posted a warning on the illegal issuance of SSL certificates on TechNet, saying SSL certificates could cause attackers to use spoofed content to execute phishing attacks or "man-in-the-middle" attacks. Currently, SSL certificates are issued to live.fi.

This event will affect all Windows systems, including win7/win8.1 and WP8.1. However, users also need not worry, Microsoft has begun to update all Windows operating system certificate trust list (CTL), the current event risk level is low.

Microsoft said in its official note: An automatic update on revocation certificates has started, involving WindowsVista, Windows7, Windows8, Windows 8.1, Windows RT, Windows RT 8.1, Windows Server 2008 and Windows Server 2008 R2, Windows Server 2012, and Windows Server R2, and all mobile devices running Windows Phone 8 and Windows Phone 8.1. Users involved in these systems and devices do not have to take any precautions voluntarily and the system is automatically protected.

However, there is still a potential threat to this event: a server that is still running Windows Server 2003 or a system that has turned off automatic Updates.

In both cases, the user is likely to be under attack. This part of the user should manually install KB3046310 patches to prevent serious events from occurring.