Scammers are sending trick emails that claim to have critical Windows security alerts, Microsoft warned this week.
These fake warnings describe themselves as a new "experimental private version of an update for all Microsoft Windows OS users". The e-mails then instruct you to download an attachment, which is actually a malicious Trojan Horse program known as Win32/Haxdoor. This malware records your passwords and credit cards and sends this data back to the attackers. "
As a matter of company policy, Microsoft will never send you an executable attachment," Microsoft said. "If you get an e-mail that claims to be a security notification with an attachment, delete it. It is always a spoof."