Beware – This Real Looking Flash Player Update Is Malware

By | June 5, 2016

Beware – This Real Looking Flash Player Update Is MALWARE

This malware/rogue has been around for a couple of years now. It faded away and is now back in full vigor.

If you see this, then you could be in big trouble:

Cloudeight InfoAve Premium

It looks real but it is not. I was reading an article on Reuters and suddenly this appeared out of nowhere. I am 100% sure my computer is not compromised – because I am careful and I check it every day and know every process running – and if I get lax, I have Emsisoft watching my back.

This real-looking flash player upgrade notice appeared while I was on a respected site and a file called “installation.exe” started downloading immediately – as soon as the fake flash player dialog showed up on my screen.  Had I clicked on the installation file which started downloading immediately and if I hadn’t been protected by common sense (and if I’d have been daydreaming Emsisoft had my back) I’d have been infected with a Trojan or malware. And the trouble is most antivirus programs are absolutely useless when it comes to preventing this sort of malware.

We have consistently told all of our readers to be wary, to not click things just because something says click to install. Always be sure of the site you are on, the URL of the ad being shown, and be very careful to read the dialog, you may find clues that tip you off that something in not right. And there are a couple of giveaways here. First if you look closely, it says “Pro”. Then it says I’m “required” to update my “Flash Player”. Adobe would recommend I update but would never say I’m required to update. Finally, the url showing in the browser’s address bar is from a scam site called simplecomputerupgrade/./info (I’ve added slashes to prevent you from clicking on it and possibly getting infected), and when I tried to visit that site, it did not exist, meaning it’s a forged URL. This link may change at anytime – become active at anytime – with crooks & miscreants, you can’t count on anything. Anyway, this malware outfit and its download package are most certainly not affiliated with Adobe or Flash Player and you must be always be wary.

If you use Google Chrome NEVER click on any Flash update – you don’t need it. Flash is built in to Chrome and it’s update automatically when Chrome updates.

If you’re using Firefox, Internet Explorer, or something else, we don’t want to incite paranoia — we want to incite due diligence. Be wary when something appears on your screen out of nowhere, and for apparently  for no reason. There’s a better than even chance that’s it’s up to no good. Some fakes are poorly done and written in English even worse than mine – I tells ya!  But some fakes, like this Flash Player fake, are done professionally – a lot of time was spent making this look like the real deal. It’s really hard to tell them from the real deal.

The malware and Trojans that are installed by this kind of malware package could harm your computer, steal your passwords, and even cause you monetary loss.

Now you’ve seen what this ruse looks like, we hope it will help you recognize it when you see it and keep you safe.

6 thoughts on “Beware – This Real Looking Flash Player Update Is Malware

  1. Barb

    Thank you for the warning, and the things to look for to avoid getting trapped. If this thing downloads without any prompting, I hope Emsisoft will stop it. At least I know not to install it. Hopefully it won’t find my computer at all.
    Barb.

    Reply
  2. Judy Gibson

    Thank you for this important information. I have Windows 10 on my laptop and HAVE received this message not once, but twice. Thank goodness my protection software caught the fake message/download and put it in quarantine. With the information you provided, I know not to install it if it appears on my PC with Vista.
    You truly are a lifesaver! Thanks again.

    Reply
  3. Charlotte Mitchell

    Although I’m very cautious about these things, it certainly does help to be reminded that everything that looks good is NOT! Thanks for the advice you give all of your readers to help us keep our computers safe.

    Reply
  4. Alex Belmonte

    I got the message moments ago…however, chrome blocked it……..so I think (hope) I’m ok.

    Reply

Leave a Reply

Your email address will not be published. Required fields are marked *