How to tell whether a Workinfo.com information-related e-mail message is genuine

Workinfo.com sends e-mail messages to subscribers when we release information about a security or information update or incident.

Unfortunately, malicious individuals can and have sent fake e-mail notifications that appear to be from Workinfo.com, a tactic known as spoofing. Some of these messages lure recipients to Web sites to download malicious code, while others include a file attachment that contains a virus.

How to verify the legitimacy of a security notification

If you have not signed up for any communications from Workinfo.com and you receive an unexpected message about a security update, you should treat the message with great caution. When in doubt, delete the message and immediately check the Workinfo.com home page for the same information.

Legitimate notifications do not have attachments

We never attach software updates to our security e-mail notifications. Rather, we refer customers to our Web site for complete information about the software update or security incident.

Legitimate notifications are also on Workinfo.com

We never send notices about security updates or incidents until after we publish information about them on our Web site.

Legitimate notifications have a valid Workinfo.com Web address

The Workinfo.com security update announcements are always on the Workinfo.com home page. Links in authentic Workinfo.com security e-mail notifications use secure Web site addresses. This allows you to check the certificate to confirm that you are indeed on Workinfo.com and not on a spoofed site.

If you suspect that an e-mail message is not legitimate, do not click any links within it. Those links may be spoofed so that they appear to send you to a legitimate Web site when they actually send you to a malicious one.

Instead of clicking any links in the notification, type or cut and paste the text of the link from the e-mail message to the address bar in your browser.

Note that hackers also have ways to display a fake URL in the address bar of your browser. So even though it may appear you are on a legitimate Web site, you may in fact be on a malicious one. To help limit this risk, begin on a Web site's home page and try to navigate to the information you're looking for.