When Surfing With FireFox Beware This Phony MS Update Notification!

 

This via Sophos and Hankers (ty, Hank):

The only Update notification from MS to trust is one coming while surfing with Internet Explorer.

This is what showed up for the Sophos people surfing with FireFox:

Which is high graphics quality.

“The page is nearly an exact replica of the real Microsoft Update page with one major exception... It only comes up when surfing from Firefox on Windows. The real Microsoft Update requires Internet Explorer.

The same site was also hosting the traditional Windows XP explorer scanner we have seen for years, as well as a new Windows 7 scanner.

Similar to spam messages that have corrected their grammar and use correct imagery and CSS, the attackers selling fake anti-virus are getting more professional.

They use high quality graphics and are using information from our UserAgent strings that are sent by the browser to customize your malware experience.

Just like visiting your bank you should only trust security alerts in your browser if you initiated a check with Microsoft, Adobe, Sophos or any other vendor for updates to their software.” – Sophos

If this pops up on you, immediately get away from the site. Do not install anything, not allow anything to install automatically.

41,606 views 19 replies
Reply #1 Top

Thanks for the heads up Doc. The site it comes from could be black listed or is the site not aware of it.

Reply #2 Top

"is essential for the normal work of your system"

"this tool is necessary for you computer to make your system being protected"

 

 

uh huh

Reply #3 Top

Quoting Bichur, reply 2
"this tool is necessary for you computer to make your system being protected"
End of Bichur's quote

Yes...still bullshit English.

Seems these idiots never had a formal education.

Reply #4 Top

Quoting Jafo, reply 3
Quoting Bichur, reply 2"this tool is necessary for you computer to make your system being protected"

Yes...still bullshit English.

Seems these idiots never had a formal education.
End of Jafo's quote

As is said, 'Sometimes things gets lost in the translation'.   :-"

Reply #5 Top

The grammar is one of the good things to notice... but it can be corrected... so watch out.

Reply #6 Top

Quoting Philly0381, reply 4
'Sometimes things gets lost in the translation'.
End of Philly0381's quote

Yep especially when it's "things get lost" or "thing gets lost" ....JAFOCHECK  ;)

Guess it's a change from ...

'all your base are belong to us' or 'me love you long time....' ....;)

Reply #7 Top

Reply #8 Top

:rofl: :rofl: :rofl: :rolleyes: :O *_* :rofl: :rofl: :rofl:

Reply #9 Top

Another problem - that page only comes up if you actively select Windows update.  It will not just pop up while you are browsing Uncle John's Chicken.

Reply #10 Top

So if I want to UD my OS I just close FF and open IE

Reply #11 Top

You don't need a browser at all to do that. In your Start Menu search type Windows Update and it should come up. Also, it should appear in your systray when updates are available. Finally, you can create a shortcut on your desktop and move it to a dock or pin it to your taskbar.

Reply #12 Top

Back to the OP.

I would surely hope that no one who runs any version of Windows OS and uses the FireFox browser doesn't see that for what it is. 

If an individual clicks on that screen they have no reason to be sitting in front of a computer.  Yes I know, very mean, but when will some of these folks ever learn.

+1 Loading…
Reply #13 Top

Quoting DrJBHL, reply 11
You don't need a browser at all to do that. In your Start Menu search type Windows Update and it should come up. Also, it should appear in your systray when updates are available. Finally, you can create a shortcut on your desktop and move it to a dock or pin it to your taskbar.
End of DrJBHL's quote

I was making a joke. When I go for updates I already have a ahortcut in my utility bin on the taskbar. But thanks anyway for the tip.

Reply #14 Top

Quoting Philly0381, reply 12
If an individual clicks on that screen they have no reason to be sitting in front of a computer. Yes I know, very mean, but when will some of these folks ever learn.
End of Philly0381's quote

So true.. weeds out the weak.. eat or be eaten. live and learn.. hopefully. :D

Reply #15 Top

If this pops up on you, immediately get away from the site. Do not install anything, not allow anything to install automatically.
End of quote

Quoting Philly0381, reply 12
If an individual clicks on that screen they have no reason to be sitting in front of a computer. Yes I know, very mean, but when will some of these folks ever learn.
End of Philly0381's quote

 

To NOTE:

not all pop up windows are the same Example:

it MAY not apply to this pop up but some of them even if you click on the X or Close button you have just installed the Bad stuff...

 

So, if you do see an pop up that you did not make happen go immediately to Task Manager and found your Browser (FireFox, Internet Explorer, Etc.)

and close it their..  just a tip

Reply #16 Top

Quoting Philly0381, reply 12
Yes I know, very mean, but when will some of these folks ever learn.
End of Philly0381's quote

just to add to it ... NEVER

EXample

My X-brother-in-law he NEVER learns and has had a PC for over 10 years..  ever time he calls me for PC help I have to tell him what and where the start menu and Taskbar is ....

and YES I have told him YOU need to sell your PC and never buy one again...

Reply #17 Top

 

...and once again here I go.

 

Let's see.....I've said the following maybe 1000 times?  Maybe more......sigh

 

Don't EVER browse the internet using an account with ADMIN credentials, educate yourself on what your computer system's "Local Security Policy" is/does and then use it to lock-down things correctly.

Doing those two things alone will have a much much much much better effect of protecting your system from ANY attack than say running 3rd-party security software and/or hoping one doesn't click on the wrong thing.

 

the Monk

 

EDIT:  I routinely demo the above fact to clients of mine using a brand-new OS installation with no 3rd-party security installed.  Running limited user accounts and a properly configured LOCAL SECURITY POLICY prevents all but the worst malware from even getting onto your system and those that can get onto your system still can't actually DO anything since the restrictions imposed by a PROPERLY configured system security policy don't allow it.  There are plenty of ways to EFFECTIVELY secure a system so it in fact does NOT need 3rd party security software for anything other than a "second opinion" (for those nervous nellies).  Education, education, education........can't say it enough!  ;P

 

Reply #18 Top

@ the_Monk,

At the risk of sounding redundant can you explain to those out there who aren't familiar or just plain ignorant what the Local Security Policy is or rather how to configure it properly. Memory refresh.

Reply #19 Top

 

Uvah:

But I'd read Simonski's article (link at the bottom). Technet stuff here is good too, but read his first. 

http://technet.microsoft.com/en-us/library/cc736685(WS.10).aspx 

http://technet.microsoft.com/en-us/library/cc739442(WS.10).aspx

http://technet.microsoft.com/en-us/library/cc755686(WS.10).aspx 

When you type in the search box "local security policy" you get:

 

 This article explains things (a few) : http://help.artaro.eu/index.php/windows-7/essential-windows-7-administration/local-security-policy-in-windows-7.html

But Shimonski's article here is really good:

http://www.windowsecurity.com/articles/windows-7-security-primer-part1.html