Fake "Microsoft Update" attack targeting Firefox on Windows
Posted 10 June 2011 - 10:01 PM
This particular scareware aims to tricks Windows users running Mozilla Firefox into installing a fake antivirus package. It starts with an alert window popping up, purportedly for installing a critical update to -- fittingly -- the Windows Malicious Software Removal Tool. The window does bear a striking resemblance to a real Windows Update window.
If the user agrees to install the 2.8MB "security update," he or she really ends up installing scareware: fake antivirus software that tells the user that his or her systems is plagued with viruses and urges the user to purchase a full version of the "antivirus software" to commence the system-cleansing process.
This scareware does have one notable tell that might tip off users that it's fake: It prompts them to perform a Windows Update while running Firefox. Authentic Windows Updates only launch through Internet Explorer.
Posted 11 June 2011 - 04:34 AM
english fail, scare fail.
also, the Mirosoft/Windows update website-based installer only works on XP. Here's what users running Vista/7 should be seeing on windowsupdate.com:
Edited by FalseAgent, 11 June 2011 - 04:55 AM.
Posted 13 June 2011 - 02:16 AM
One of my friends used to encounter an infection by a fake explorer window
and a fake virus notification. Guess it. She permitted them to run and come
into her PC so easily.