Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Fake Firefox update used to sling scareware


  • Please log in to reply
12 replies to this topic

#1 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,490 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:04:30 PM

Posted 30 July 2010 - 03:57 PM

Online con artists have developed a strain of scareware that poses as a Firefox update...The new ruse features a fake Firefox "Just Updated" page of the type that is displayed just after users update their browser software, a regular occurrence of late. The page claims that users need to get a Flash update, and produces a download dialogue box with a scareware payload. The attack kicks in once surfers visit a maliciously constructed website and is not associated with genuine Firefox updates from Mozilla, which simply serve as a theme for the attack.

theregister.co.uk
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

BC AdBot (Login to Remove)

 


#2 audioAl

audioAl

  • Members
  • 426 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Seadrift,Tx.
  • Local time:02:30 PM

Posted 31 July 2010 - 01:36 AM

Thanks, I'll keep an eye out for this rascal!
Windows Vista Ultimate 64 bit/Intel e5300 cpu/ASRock G41M-LE mainboard/G max4500 onboard graphics/4gigs OCZ 800Mhz ram/ VIA onboard HD Vinyl audio/Yamaha RX-V465 HT receiver/ Cambridge SoundWorks and Infinity RS1001 speakers

#3 Union_Thug

Union_Thug

    Bleeps with the fishes...


  • Members
  • 2,355 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:is everything
  • Local time:04:30 PM

Posted 31 July 2010 - 08:32 PM

Thank you for the heads-up, and the monumental job you & all the other volunteers and members do on this site and others like it. If these criminals had their way the only way to stay safe on the internet would be to stay off the internet.

Jeebus, how I LOATHE these #$%@ing CRIMINALS.

Edited by Union_Thug, 31 July 2010 - 08:38 PM.


#4 quietman7

quietman7

    Bleepin' Janitor

  • Topic Starter

  • Global Moderator
  • 51,490 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:04:30 PM

Posted 31 July 2010 - 08:58 PM

You're welcome on behalf of the Bleeping Computer community.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#5 samuel3

samuel3

  • Members
  • 2,349 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:30 PM

Posted 02 August 2010 - 03:30 PM

Theres an update for Firefox 3.6.8? Is this ok to download? I got it from Help>Check for Updates.

#6 samuel3

samuel3

  • Members
  • 2,349 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:30 PM

Posted 02 August 2010 - 04:11 PM

So i see downloaded 3.6.8 so would i have a virus now? I see the 'Get the latest flash version' I ignored it. But now i got downloaded 3.6.8 would i have a virus or not?

#7 Union_Thug

Union_Thug

    Bleeps with the fishes...


  • Members
  • 2,355 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:is everything
  • Local time:04:30 PM

Posted 02 August 2010 - 04:16 PM

Theres an update for Firefox 3.6.8? Is this ok to download? I got it from Help>Check for Updates.


Yes. It's ok, here's the release notes: http://www.mozilla.com/en-US/firefox/3.6.8/releasenotes/

Next time you're in doubt the easiest way to check: in FF click Help>>> choose Release Notes in drop-down menu & you're good to go. :thumbsup:

#8 Union_Thug

Union_Thug

    Bleeps with the fishes...


  • Members
  • 2,355 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:is everything
  • Local time:04:30 PM

Posted 02 August 2010 - 04:28 PM

Theres an update for Firefox 3.6.8? Is this ok to download? I got it from Help>Check for Updates.


Hmmm. I updated to 3.6.8 last week and did not get prompted to install new flash. Here's a few helpful links to check your Flash:

Adobe - Test Adobe Shockwave and Flash Players http://www.adobe.com/shockwave/welcome/

Player Download Center uncheck Free McAfeeŽ Security Scan Plus if you don't want to it (I surely don't)
DL link: http://www.adobe.com/go/getflash

How to uninstall the Adobe Flash Player plug-in and ActiveX control
http://kb.adobe.com/selfservice/viewConten...7&sliceId=2

Uninstaller for older versions of Adobe Flash Player
http://kb2.adobe.com/cps/141/tn_14157.html

Adobe Flash Player: Settings Manager
http://www.macromedia.com/support/document...gs_manager.html

Configure your Flash Player's Global and Website settings
http://www.calendarofupdates.com/updates/i...showtopic=15065 (From 2007, may be outdated)


Credit for above links to Robear Dyer (PA Bear) AumHa VSOP, Admin & Moderator @ the Auhma Forum:
http://forum.aumha.org/viewtopic.php?f=26&...eb49f4582834c3e

Edited by Union_Thug, 02 August 2010 - 04:37 PM.


#9 Union_Thug

Union_Thug

    Bleeps with the fishes...


  • Members
  • 2,355 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:is everything
  • Local time:04:30 PM

Posted 03 August 2010 - 02:03 AM

So i see downloaded 3.6.8 so would i have a virus now? I see the 'Get the latest flash version' I ignored it. But now i got downloaded 3.6.8 would i have a virus or not?

I'm not trying to be a smart-azz, but your concerns are a bit misguided IMHO. You're worried that the Firefox update is the danger in this case while you've chosen to IGNORE by your own admission the greater threat---an outdated (and possibly VULNERABLE) version of Flash

I would look into the Flash issue if I were you.

Edited by Union_Thug, 03 August 2010 - 02:07 AM.


#10 Layback Bear

Layback Bear

  • Members
  • 1,880 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Northern Ohio
  • Local time:03:30 PM

Posted 08 August 2010 - 10:03 AM

I have Firefox 3.6.8 and Flash Player 10.1.53.64 and I still get warning to install plug-in to view. It doesn't tell what the plug-in is so I don't install. Is there a way I can find out what the plug-in is before installing?

#11 Union_Thug

Union_Thug

    Bleeps with the fishes...


  • Members
  • 2,355 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:is everything
  • Local time:04:30 PM

Posted 08 August 2010 - 01:15 PM

@ layback bear

If you have the latest Flash plug-in installed Tools>>Add-Ons>>Plugins I would say no.
Posted Image

Beyond that , you'll have to wait for BC staff to answer your question, cuz I'm not sure. Could be Silverlight.

Edited by Union_Thug, 08 August 2010 - 01:23 PM.


#12 Layback Bear

Layback Bear

  • Members
  • 1,880 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Northern Ohio
  • Local time:03:30 PM

Posted 10 August 2010 - 08:01 AM

I found out what it wants me to download, (Apple Quick Time). I have never heard of it so I did a little Google and I'm still not sure I want it. Has anybody tried it?

#13 nqzdepofltr

nqzdepofltr

  • Members
  • 30 posts
  • OFFLINE
  •  
  • Local time:04:30 PM

Posted 11 August 2010 - 09:42 AM

Thanks! Ill look out for this pest!
Anyone know what malware it downloads? Usually rogue av.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users