609840 - fake firefox upgrade needed

Status: RESOLVED INVALID

(Firefox :: General, defect)

Description

[Paul Millette]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.9.1.15) Gecko/20101026 Firefox/3.5.15
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.9.1.15) Gecko/20101026 Firefox/3.5.15

fake firefox upgrade needed!

You're really being attacked hard, but probably know by now!

I was looking at a picture, up comes a full screen notice, that looked like from firefox, that I need to upgrade immediately, to prevent further problems etc...
loaded it, 
The first time, I was sucked in, looked so real, downloaded, and ran it, and I'm now reformating the disk on that computer, before reloading Windows (2000).
http://ftp.jaist.ac.jp was one site that did this, probably many more.

email me if you want more info. You're really being attacked with this.
DAMN HACKERS!!!!

tia, Paul

Any advice how to protect against this?




Reproducible: Always

Steps to Reproduce:
1.link to that site to download your firefox update
2.run the update file
3.installs who knows what, kills firefox, IE, can't copy files, reqally destoys Windows.
Actual Results:  
1.link to that site to download your firefox update
2.run the update file
3.installs who knows what, kills firefox, IE, can't copy files, reqally destoys Windows.

Comment 1

[Ryan S. Scheel [:havvy]]

This technically is not a bug.  What this is called is phishing.  NoScript would help against this FYI.

Comment 2

[Matthias Versen [:Matti]]

There is nothing we can do. It's always possible to create fake update messages.
Never download and install software from a source that you don't thrust and never enter private information at a website if you are not sure that you are at the right site.

I have to mark this report invalid because this can't be fixed by us.