Fake firefox update

[Anupam]

Thanks for the links. Strange that SurfPatrol site does not provide any information, nor the download there.

[Sope]

I had a quick look at this Anupam.

When I visit the Surfpatrol website it offers an install button at the top of the page if I'm using Opera, whereas in IE or Firefox the install button is not offered.

I chose not to install it in any case!

[termix]

whereas in IE or Firefox the install button is not offered.

'cos they they haven't developed extensions for them yet

[Anupam]

Ah OK, so they detect the browser, and offer the extension for download as required. Thanks for that Sope.

[bo.elam]

This fake updates are becoming popular.

A few days ago I read about one posing as an Avast update, here is the link. I also read about another one acting as a Chrome update, I cant locate that link.

https://www.net-security.org/malware_news.php?id=2403

Bo

[Concerned User]

Originally Posted by Taurus

Concerned User, I'm just curious. Was Firefox Sandboxed?

No...Normal browsing (no sandboxie)....I tend to use sandboxie during sessions of online banking etc...but going forward, will use sandboxie more regularly...

Originally Posted by bo.elam

This fake updates are becoming popular.

A few days ago I read about one posing as an Avast update, here is the link. I also read about another one acting as a Chrome update, I cant locate that link.

https://www.net-security.org/malware_news.php?id=2403

Bo

@ Bo: they are indeed becoming more and more cleverer, I had already updated all plugins (flash, java et al) a week ago to the latest versions, the only saving grace here is the fact that due to the limited user account, the fake update prompted for UAC credentials. Many people would hate UAC prompts or stuff like surun XP. You do have some sites recommending people to turn of UAC


However, these are the kind of programs that save the OS from nasties in the long run, not AV suites....Just my opinion that's all.

[Anupam]

Originally Posted by Concerned User

No...Normal browsing (no sandboxie)....

Whoa! You did all that without Sandboxie? .. I was not expecting this from you . I think you took quite a risk to allow the update, inspite of being without Sandboxie at that time.

[Concerned User]

Originally Posted by Anupam

Whoa! You did all that without Sandboxie? .. I was not expecting this from you . I think you took quite a risk to allow the update, inspite of being without Sandboxie at that time.

I decided that using sandboxie all the time was too much of paranoia...besides i know what I browse, so the risks are a bit less...I only downloaded the update file out of curiosity, did not install it......but have started using sandboxie all the time now.

Curiosity (nearly) killed the cat!

[Taurus]

Originally Posted by Concerned User

However, these are the kind of programs that save the OS from nasties in the long run, not AV suites....Just my opinion that's all.

Agreed and I share the same opinion.

[Joe A.TT]

Originally Posted by Concerned User

...the only saving grace here is the fact that due to the limited user account, the fake update prompted for UAC credentials...

...And, aren't you glad you were using a limited user account and didn't turn UAC off?

As MC said elsewhere, UAC is an integral part of Windows that safeguards users from doing foolish things. It pauses and gives the user time to think about just what action they want to allow. IMHO, people who turn off UAC because they feel it's an annoyance better know exactly what they are about. I'm not saying that it shouldn't be turned off, but only advanced users should probably do that.

I use Sandboxie all the time for my Internet sessions and it's configured to delete the sandbox automatically upon closing the browser - I don't find it a bother and I honestly don't feel it's too much paranoia especially seeing that nasties are getting more wily all the time. Launching Opera sandboxed isn't a problem either because I've created a shortcut on my desktop for that. Also, I don't observe any negatives (like slowdowns) from using Sandboxie, so what's to not like about Sandboxie?