Fake Windows Update Popup: It's Back (Again)

[ronjor]

The fake Windows Update popup has been doing the rounds on Myspace for a long time (we're talking at least June 2007). Every now and again it returns, usually varying the payload. Well, here we have an example where Phishing is involved and a sneaky imitation of a well known security program is thrown in for good measure. Find out more after the jump...

Story

[Longboard]

eeh;
Is there any doubt that the "social networking" sites are the most fertile seeding grounds for propagation of mals ?

The connected generation are connecting in more ways than they might think..

[Dogbiscuit]

According to Symantec, 91% of phishing attacks now involve social networking sites.

[controler]

Does this show the update icon in the tray before the popup?

Yesterday I had the tray icon show but when i hovered over it it always showed
0 % then it disappeared. No sure what that was.

[aigle]

Now u r becoming a true paranoid.

It,s not a true pop up. I played with this page. It,s a pop up like picture in the page. So no tray icon I think.

http://www.offensivecomputing.net/?q=node/728

AVG and Antivir both detected it in real time. D plus will not let it go anywhere! GesWall stopped it dead and so was the ThreatFire. Poor malware.

[controler]

I can tell you when I went to Windows Download page and did the SP3 update, i lost my Windows firewall. I owe that to a bad install. Can't turn it back on either. But nope I am not too paranoid today.
just running Onecare and boclean on this test box along with VMWare.

[Baz_kasp]

Slightly different to what is being discussed in that story, but I found one (popup) that was a mock up of WSC, looks quite convincing to a newbie eye and pushes two well known rouge applications:



Sunbelt blogged it too:

http://sunbeltblog.blogspot.com/2008...-security.html