How to identify the authenticity of Microsoft Security emails

Generally, if Microsoft publishes a security notice, it will notify the subscriber of the reminder service by email. However, it has been found that many malicious people use spoofed methods to forge Microsoft's Security Bulletin emails. Some emails also trick the recipient into connecting to some websites to download malicious programs, or the emails themselves contain viruses as attachments.

Find out what

Fortunately, scammers can always see it. Here are some tips to know if Microsoft's security emails are true.

The email does not contain attachments. The real Microsoft Security Bulletin email will never contain patches as attachments. In addition, we will provide customers with the original complete security bulletin on our website, which contains a link to download the patch. Most Microsoft software patches can be installed in Microsoft? Windows? Update, Microsoft Office Update, or other Microsoft download center.

The email is digitally signed. Before releasing a Security notice, Microsoft Security Response Center first adds a digital signature to the announcement. You can use the Key file published on the Microsoft TechNet website to verify Microsoft's digital signature.

The Security Bulletin is displayed on Microsoft.com. We will never send an announcement email to the customer before releasing the relevant security announcement to the Microsoft website. If you suspect the authenticity of the security notice you received, check the TechNet website to see if the same security notice is displayed.

Example of counterfeit email

Forged Security emails usually look very formal, for example, emails that spread the Swen worm.

Take a look at this image:

A wolf in sheepskin. The professional and sincere appearance have an appropriate tone, deceiving many users and infecting their computers with viruses.