Users are being warned of a new phishing scam falsely telling recipients they need to download a Microsoft patch.