Skip to main content

Fake Firefox update email - don't click, or you may have your passwords stolen

Fake Firefox update email - don't click, or you may have your passwords stolen

Description: Fake FirefoxAlthough we see some very sneaky social engineering tricks used by scammers and cybercriminals on occasions, designed to trick users into making unwise decisions, we also see some very basic attempts at online crime.

Take, for instance, this email which was spammed out this weekend pretending to be an advisory about a new update to the popular Firefox web browser.

Hopefully no regular reader of Naked Security would fall for it.

Description: Fake Firefox update email

Subject: New version released.

Message body:

Important notice
A Firefox software update is a quick download of small amounts of new code to your existing Firefox browser. These small patches can contain security fixes or other little changes to the browser to ensure that you are using the best version of Firefox available. Firefox is constantly evolving as our community finds ways to make it better, and as we adjust to the latest security threats. Keeping your Firefox up-to-date is the best way to make sure that you are using the smartest, fastest and . most importantly . safest version of Firefox available. A Firefox update will not make any changes to your bookmarks, saved passwords or other settings. However, there is a possibility that some of your Add-ons won.t be immediately compatible with new updates.
For security reasons please update your firefox version now
[LINK]

There are no surprises here. The link downloads an executable file, which bundles together an installer for Mozilla Firefox 5.0.1 and... a password-stealing Trojan horse.

Sophos already detected the Trojan horse as Troj/PWS-BSF.

Our labs have also added detection for the actual bundle itself, which we're identifying as Troj/Mdrop-DPO.

You should always exercise caution when you're asked to click on a link in an unsolicited email.

And, in particular, don't forget that Firefox automatically updates itself - so you should never have to act upon an email like this. If you want to manually look for the latest update, simply open Firefox and go to the Help menu and select About Firefox.

Here's a link to Mozilla's website, where you can download the real latest version of Firefox.

 

 

Thanks & Regards

============================

Mohammed Rahman Mecheri

 

System Analyst – Network & Infrastructure
Kamal Osman Jamjoom Group LLC.
Unit #422, Sultan Business Centre
P.O Box 27844, Dubai, UAE
Tel:       +971 (4) 3355232 Extn: 1339
Fax:      +971 (4) 3355231
Mobile:  +971 (50) 9774048
Email:   
mrahman.koj@gmail.com

             mrahman_koj@hotmail.com

             mrahman_koj_est@yahoo.co.uk

Web :    https://about.me/mrahman

============================

 

Comments

Popular posts from this blog

Tech Tips - Turn on Delegate Access

Turn on Delegate Access A delegate automatically receives Send on Behalf permissions. This means your delegate can do the following: ·          Respond to a meeting request sent to you, the manager. ·          Receive meeting request responses sent to you, the manager. ·          Compose and send an e-mail message that, when received, will have Delegate Name   on behalf of   Manager Name   next to   From . By default, the delegate can read only the meeting requests and responses sent to the manager. The delegate does not have access to read any other messages in your   Inbox . 1.      On the   Tools   menu, click   Options . 2.      Click the   Delegates   tab, and then click   Add . If the   Delegates   tab or the   Add   button is mi...

How do I choose my password?

How do I choose my password? Your password is more than just a key to your online account. If your password falls into the wrong hands, someone can easily impersonate you while online, sign your name to online service agreements or contracts, engage in transactions, or change your account information. So, choose your password carefully and then keep it safe from others. A password is like a toothbrush: Choose a good one and don't share it. A Yahoo! password can be any length, and can contain spaces, symbols, or numbers. With so many options, you should be able to come up with a password that's easy for you to remember but impossible for someone else to figure out. A password is a secret that only you should know. Here are some tips for choosing a strong password - one that is difficult to guess. . Choose a password you'll remember. It should be memorable for you (so that you don't have to write it down or leave it in the open), but difficult for others to guess....

Tech Tips

Change the ruler's measurement units for comfortable form and report design   The ruler is a great way to ensure that your reports print accurately or your form controls are right where you want them. However, you may not know exactly what measurement units Access' ruler indicates. If you're more comfortable with the metric system (centimeters instead of inches), you can adjust your ruler permanently. Or, if you have Access 2003, you can simply input measurements in your preferred unit. To change the ruler's units of measurement: 1. Access your Windows Control Panel, which you can usually find on the Start menu. 2. Double-click on the Regional And Language Options icon. If you're using Windows XP's Category view, just click on Date, Time, Language, And Regional Options and then click on Regional And Language Options. 3. In the Regional And Language Options dialog box, select the Regional Options tab, if necessary. 4. Click the Customize button to display the Cus...