Seems to be some confusion

El Reg should fix the article since it's not clear.

There is a completely legitimate page that appears very similar to the one the VXers use that also informs you to upgrade Flash. However, it DOES lead to Adobe's site and goes through the regular channels to update Flash. What this fake version does is appears to give you an upgrade, but when you attempt to use the 'upgrade flash' link, it has you download a payload.

Read the F-Secure article, folks.

Also: "In related news, McAfee warned earlier this week that VXers were offering a Trojan disguised as trial versions of its VirusScan anti-virus software."

So it's going to perform like regular McAfee - slow, bloated and does no good at all?

Riddle Me This

Since Firefox itself is checking for updates, why would you EVER trust any webpage that loads and reads "you need to update" this or that?

Don't do it. Only update firefox when a trusted add-on claims a newer version of itself is available through the normal popup window, and of course if you haven't kept this in mind and are taken somewhere questionable, Look At The URL.

On a side note, this malware seems less harmful than Flash, maybe it all works out for the best.

Bottom line

Always look at the URL. Just keep glancing back up at it to make sure you're on the right site.

Also, there is a legit page that does appear when you update firefox and this is an exact copy of that. The difference is where that URL goes, so look at the status bar too.

*checks to make sure he's on el reg*

*submit*

Only ChavOS effected - i'm safe

Again - it is only Microsoft based (chav) OS's that are effected by this malware.

Morally correct OS's are fine (and Apple Os's are too) - like pretty much all malware.

Chav spellcheckers.....

Effected? Affected perhaps, as are you it would appear. Write out 100 lines of code.

Microsoft Windows only

The article failed to mention that the malware is Microsoft Windows specific.

http://img443.imageshack.us/img443/5033/ffupdateexe.jpg