Microsoft Office name being used to compromise PCs

The Microsoft Office name is being leveraged by cybercriminals in two new campaigns meant to infect users' machines. Email security firm Red Condor on Thursday warned of a spear phishing run in which messages appear to be invitations for recipients to update their Microsoft Office Outlook Web Access settings. Following the link, however, leads to the pernicious, data-stealing Zeus trojan. In another scam, searches for "office.microsoft.com" is leading to malicious websites hawking rogue anti-virus programs, internet security vendor Websense said Friday in a blog post. — DK