Sophos has detected a fake Microsoft Security Bulletin warning. They made a blog entry about it in their website.

The message reads, “a new 0-day vulnerability which affects machines running MICROSOFT WORD and allows an attacker to take full control of the vulnerable computer if the exploitation process is successful”.

Sophos notes that this kind of spam is not new. This kind of spam were being sent to people as early as two years ago.

If people fell for the spam trick, attackers can get access to their computers. The identity of the spam is called Troj/Kango-D according to Sophos.

Source: Sophos