Hackers are distributing rogue email notifications about changes in Microsoft’s Services Agreement. The rogue emails are copies of legitimate notifications that Microsoft sent out to users. In the malicious versions of the emails, the correct links have been replaced with malicious sites. The emails use a recently circulated Java exploit to infect their computers with malware. The attack is known as a drive-by download and is very effective because it requires no user interaction to achieve its goal.Reviewing the email headers can also offer clues whether the email is legitimate.”]

