Firefox malware disguises itself as a Microsoft update

CRIMINALS HAVE CREATED a near-replica version of the Microsoft Update page to fool users of Firefox.

Like a previous attack that produced a fake Firefox security alert, the malware comes up when a user-agent string is detected from a Firefox user browsing a malicious web site. This time though, it comes up with a replica of the real Microsoft Update page, which you only see if you're using Internet Explorer.

The same malicious web site is also known for hosting a fake Windows XP explorer scanner and Windows 7 scanner, said Chester Wiesniewski, senior security advisor at Sophos.

He said, "Similar to spam messages that have corrected their grammar and use correct imagery and CSS, the attackers selling fake anti-virus are getting more professional."

"They use high quality graphics and are using information from our UserAgent strings that are sent by the browser to customize your malware experience."

This type of scareware, generally asking you to buy a fake security product to make your computer 'safe', has plagued computer users in the recent past.

Last month saw an explosion in this fake anti-virus phishing attacks hitting Mac users, while many Windows users are used to encountering these type of attacks, with some of them advanced enough to hold your files hostage unless you're willing to pay up. µ