Scareware Scheme Abuses Firefox 'What's New' Page

[JMH]

It looks like Mozilla's efforts to encourage users to update Flash Player has turned against them for the first time. Security researchers warn that a new scareware distribution campaign is using a fake copy of the "Firefox Updated" page to trick users into installing a rogue antivirus program.

Since Firefox 3.5.3, Mozilla also checks if Flash Player is up-to-date when the browser is upgraded. If an old version of the plug-in is detected, a warning message encouraging users to install the latest variant, is displayed on the "whatsnew" page. This is the page that automatically opens on first run after a successful Firefox update.

Over 98% of computers in the world are estimated to have Flash Player installed and because of this, the application is amongst the most targeted pieces of software. Mozilla took the decision to perform the Flash Player check, because a lot of Firefox users failed to update the plug-in and exposed themselves to drive-by-download attacks.

More -
Scareware Scheme Abuses Firefox 'What's New' Page - FakeAV served as Mozilla-recommended Flash Player update - Softpedia

 

[Mellon Head]

Y'know, the internet is becoming a minefield, no pun intended. It has to be rough for those people who aren't that technically savvy to keep from getting some rogue software by accident, much less being foolish online.

Just one more reason to keep your wits about you, I guess.

 

[Win7User512]

If there is a will, there is a way.

 

[qballrail]

Y'know, the internet is becoming a minefield, no pun intended. It has to be rough for those people who aren't that technically savvy to keep from getting some rogue software by accident, much less being foolish online.

Just one more reason to keep your wits about you, I guess.

I'm just thankful for the knowledge I have and if I can help someone out that's less technically savvy, I feel I've enjoyed a victory over these sleeze-balls! The Internet is becoming a very scary place for all of us, I fear.

 

[Borg 386]

Y'know, the internet is becoming a minefield, no pun intended. It has to be rough for those people who aren't that technically savvy to keep from getting some rogue software by accident, much less being foolish online.

And unfortunately it's just getting worse. I've seen more and more people with "fake security suites" and whatnot when I go to fix their PC's.

It's not surprising that one of the fastest growing fields nowadays is Computer Security Specialist. It's in the top 5 now I believe.

I hate to sound paranoid, but it's gotten to the point that whenever there's any kind of an update, I try to confirm from multiple sources that it's an actual update.

 

[Win7User512]

And unfortunately it's just getting worse. I've seen more and more people with "fake security suites" and whatnot when I go to fix their PC's.

Yeah, they used to have their malware pretend to be antivirus software and even appear in the control panel's security category as such. Not sure how many do that anymore.

 

[Richardc269]

I remember getting that bogus "anti-virus" crap when I had Windows XP. I think it called itself Windows XP Anti-Virus 2009 or some rubbish. And it'd then "scan" your computer, with some BS window (and guess what? I have 4 drives on this machine, and the last one too), so it would say I only had 2 drives, then it would say you've got viruses and mal-ware, and try to trick you into buying their bogus anti-virus.

The only way to get rid of said virus is to go to another computer, put MalWare Bytes onto a Flashdrive stick, and run the MalWare Bytes from the FlashStick onto the infected computer, and presto! Virus gone.

 

[aaronmiller2010]

Having sorted 4/5 friends PC's & Laptops, I also noticed the amount of dodgy anti-virus software. Its getting quite common on websites now advertising bogus software for a small charge but as is said in the above posts i am glad i know what i know. I just pity those that don't really know and think by downloading the software its all safe & sound!.

 

[Consequences]

Y'know, the internet is becoming a minefield, no pun intended. It has to be rough for those people who aren't that technically savvy to keep from getting some rogue software by accident, much less being foolish online.

Just one more reason to keep your wits about you, I guess.

I'm just thankful for the knowledge I have and if I can help someone out that's less technically savvy, I feel I've enjoyed a victory over these sleeze-balls! The Internet is becoming a very scary place for all of us, I fear.

It always feels good to help those less savvy. You know it may seem like the threats out there are becoming increasingly overwhelming for the internet community but while they continue to grow so too does the population of technically informed users. Updated definitions help too!

Safe browsing!