Internet security firm sophos warns users about a malware which imitates Microsoft Update. The new malware leading users to rogue security software.
The malware warns you that your computer is full of viruses and needs to be cleaned. And it is cleaned by entering your credit card number to buy the “anti-virus program”.
The page is nearly an exact replica of the real Microsoft Update page with one major exception. It only comes up when surfing from Firefox on Windows. The real Microsoft Update requires Internet Explorer.
Similar to spam messages that have corrected their grammar and use correct imagery and CSS, the attackers selling fake anti-virus are getting more professional.
They use high quality graphics and are using information from our UserAgent strings that are sent by the browser to customize your malware experience.
Just like visiting your bank you should only trust security alerts in your browser if you initiated a check with Microsoft, Adobe, Sophos or any other vendor for updates to their software.