New Phishing Mail Tactics

I guess every user with an email address has already received at least one email from a bank, financial website or other website asking him to download a security patch to avoid account termination or a ban. Those mails are so common nowadays that they seem to lack the desired affect and that less and less users are falling for those phishing emails that point to the download of a Trojan of course and not a security update.

The new kind of phishing emails is actually using the knowledge of those first gen phishing emails by warning users about those emails which will lead to a fake website. Since this is a relatively new scheme many users will probably fall for it believing the message that is send to them.

Who would believe that a message that is warning the user about phishing emails is actually a phishing email ? The best way to defend against this kind of attacks ? Never open links in mails, always visit the website directly.