Fake Firefox warnings may lead to 'scareware'

After targeting computers running Apple Inc's Mac OS X operating system, "scareware" makers are turning their attention back to devices running Microsoft's Windows OS. "Scareware" frightens users into clicking malware links by warning that their computers are unsafe unless they do so. Internet security firm Sophos said the latest scam involves fake security warnings on Mozilla's Firefox browser, which redirect users to malware sites. "Taking advantage of detailed information about the person's computer and software allows for a much more specific, believable social engineering attempt... We are likely to continue to see these criminals targeting each operating system, browser and any other details that can be gleaned from HTTP requests sent from our devices," Sophos Canada senior security adviser Chester Wisniewski said in a blog post. A screenshot on the blog post showed a "standard" Firefox warning screen, but which appears to scan one's computer. Clicking on the "Start Protection" button will download the "latest, greatest fake anti-virus program," Wisniewski said. "It will faithfully detect fake viruses on your computer until you register it for $80 or more," he said. Wisniewski pointed out Firefox does not include a virus scanner inside of it and it will only warn users about visiting malicious pages. "If you get a warning about a dangerous website from Firefox you can always play it safe... Close the browser," he said. On the other hand, Wisniewski said users of Microsoft's Internet Explorer browser get the standard "My Computer" dialog that appears to do a system scan inside their browser window. Recent attention on scareware had focused on the Mac, with the spread of the MacDefender scareware, which claims to find malware on a target computer and scaring the user into paying for useless fake antivirus software. — TJD, GMA News