'Firefox need to update immediately' Fake Alert

'Firefox need to update immediately' Fake Alert Image

ESG security researchers have issued a warning aimed at users of the popular Firefox Web browser. The 'Firefox need to update immediately' fake alert is part of a scam designed to trick inexperienced computer users into infecting their computer with malware. The 'Firefox need to update immediately' fake alert may appear due to a malware infection already on your computer or when visiting unsafe websites with poorly regulated content. Regardless of its source, following the instructions contained in the 'Firefox need to update immediately' fake alert will end up on your computer becoming infected with malware.

This fake message is displayed in a red error screen that is similar to many malware warnings displayed by legitimate Web browser components. It is important to note that the 'Firefox need to update immediately' fake alert is not related to Firefox in any way and that the 'Firefox need to update immediately' fake alert is a blatant attempt to fool you into downloading and installing a dangerous ransomware Trojan. Since Trojans, unlike viruses and worms, cannot spread on their own from one computer to another, they will often require these kinds of scams in order to ensure that victims download and install the Trojans themselves (thus the name 'Trojan', after the Trojan horse from Homer's Iliad). The full message reads:

Firefox need to update immediately! Your version of Firefox (18.0) is vulnerable and needs to be updated. Attack pages try to install programs that steal private information, use your computer to attack others, or damage your system. Some attack pages intentionally distribute harmful software, but many are compromised without the knowledge or permission of their owners.

What Happens if You Click on the 'Firefox need to update immediately' Fake Alert?

Clicking on the 'Update' button contained in the 'Firefox need to update immediately' fake alert will download a ransomware Trojan onto your computer. This ransomware has been identified as a member of the Urausy family of ransomware. Once installed, these kinds of ransomware will block access to your computer and prevent from accessing your software or files. This is done in order to extort a ransom from the victim. ESG security researchers strongly advise computer users to avoid downloading and installing updates from sources other than direct downloads from Mozilla Firefox's official website. Fake web browser and application updates are a common source of malware. For example, ESG security researchers have seen numerous examples of malware contained in fake Adobe Flash Player updates. The 'Firefox need to update immediately' fake alert is just one variant of a scam that is extremely common, which involves displaying error messages claiming that it is necessary to update a component in order to convince the victim to install malware on their own computer.