Fake anti-virus mimics Microsoft Update to target Windows users with replica web page

The latest fake anti-virus attack tricks users into installing malicious software by posing as a Microsoft security update, warns security firm Sophos.

Download this free guide

The importance of web security

Join us as we take a look at the different approaches you can take in order to bolster your web security. We find out how to identify and address overlooked web security vulnerabilities, how security controls affect web security assessment results and why web opportunities must be met with appropriate security controls.

Start Download

• Corporate E-mail Address:

  You forgot to provide an Email Address.

  This email address doesn’t appear to be valid.

  This email address is already registered. Please login.

  You have exceeded the maximum character limit.

  Please provide a Corporate E-mail Address.

• • I agree to TechTarget’s Terms of Use, Privacy Policy, and the transfer of my information to the United States for processing to provide me with relevant information as described in our Privacy Policy.

  Please check the box if you want to proceed.

• • I agree to my information being processed by TechTarget and its Partners to contact me via phone, email, or other means regarding information relevant to my professional interests. I may unsubscribe at any time.

  Please check the box if you want to proceed.

By submitting my Email address I confirm that I have read and accepted the Terms of Use and Declaration of Consent.

A bogus web page that is an almost exact replica of the real Microsoft Update page appears while surfing using a Firefox browser.

The use of high quality graphics and professional interfaces means more users are likely to fall for the scam, says Sophos.

The attack is designed to take advantage of the monthly Patch Tuesday security updates that Microsoft issues.

"Users need to be more vigilant than ever before, as bogus security alerts pop-up in their browsers," says Graham Cluley, senior technology consultant at Sophos.

Fake anti-virus attacks are big business for cybercriminals and they are investing time and effort into making them as convincing as possible, Graham Cluley says.