Welcome guest. Before posting on our computer help forum, you must register. Click here it's easy and free.

Author Topic: What about Bogus Updates?  (Read 3716 times)

0 Members and 1 Guest are viewing this topic.

Geek-9pm

    Topic Starter

    Mastermind
  • Geek After Dark
  • Thanked: 1026
    • Gekk9pm bnlog
  • Certifications: List
  • Computer: Specs
  • Experience: Expert
  • OS: Windows 10
What about Bogus Updates?
« on: July 16, 2017, 02:10:28 PM »
Have any one of you have  experience or knowledge about fake Windows updates?
Here is a ten-year old article that was recently updated:
http://www.express.co.uk/life-style/science-technology/786283/Microsoft-windows-10-scam-tech-support-warning
Quote
Last year Microsoft adopters were targeted by a number of shocking scams including receiving cold calls from a self-appointed Microsoft employee and malware that disguises itself as a security update, making you call a fake Microsoft hotline.
When was that? Does it still happen? Should I turn off automatice updates?
Just asking....  :)

Salmon Trout

  • Guest
Re: What about Bogus Updates?
« Reply #1 on: July 16, 2017, 03:44:53 PM »
I woud say that using Windows Update is safe enough, or else you can use Belarc Advisor which queries Microsoft servers, but don't respond to emails or popups encountered while web browsing.

patio

  • Moderator


  • Genius
  • Maud' Dib
  • Thanked: 1769
    • Yes
  • Experience: Beginner
  • OS: Windows 7
Re: What about Bogus Updates?
« Reply #2 on: July 16, 2017, 06:34:56 PM »
It's a 10 year old article Geek...

Your News priviledges are gonna be revoked.
" Anyone who goes to a psychiatrist should have his head examined. "

BC_Programmer


    Mastermind
  • Typing is no substitute for thinking.
  • Thanked: 1140
    • Yes
    • Yes
    • BC-Programming.com
  • Certifications: List
  • Computer: Specs
  • Experience: Beginner
  • OS: Windows 11
Re: What about Bogus Updates?
« Reply #3 on: July 16, 2017, 06:42:10 PM »
The " malware that disguises itself as a security update" Was NOT through windows update. It was like those common fake advertisements saying "100 infections Found! Clean now?" and clicking the ad takes you to a scammy fake AV site. Just in this case it was "You need ### updates. Install now?" and similar prompts.
I was trying to dereference Null Pointers before it was cool.

Ander



    Newbie

    • Experience: Expert
    • OS: Windows 10
    Re: What about Bogus Updates?
    « Reply #4 on: July 16, 2017, 07:04:30 PM »
    Don't worry; Windows Update connects only to Microsoft's servers.

    If you must manually download and run any updates, just be sure they're from Microsoft.com, and not anywhere else.

    Geek-9pm

      Topic Starter

      Mastermind
    • Geek After Dark
    • Thanked: 1026
      • Gekk9pm bnlog
    • Certifications: List
    • Computer: Specs
    • Experience: Expert
    • OS: Windows 10
    Re: What about Bogus Updates?
    « Reply #5 on: July 16, 2017, 08:20:57 PM »
    It's a 10 year old article Geek...

    Your News priviledges are gonna be revoked.
    Patio, Windows 10 was not out there 10 years ago. Thearticle claims there are now  recent cases of the old trick taht was reported 10 years ago. Windows 10 is the target in the new fake messages.

    Notice the image claims taht the warning is from Microsft.

    BC_Programmer


      Mastermind
    • Typing is no substitute for thinking.
    • Thanked: 1140
      • Yes
      • Yes
      • BC-Programming.com
    • Certifications: List
    • Computer: Specs
    • Experience: Beginner
    • OS: Windows 11
    Re: What about Bogus Updates?
    « Reply #6 on: July 16, 2017, 09:25:36 PM »
    You know what combats this?

    User education. You have to be incredibly ignorant (not in an insulting way) and unfamiliar with how computer Operating Systems and web browsers work to fall for such a transparent scam.

    Quote
    The scam starts by redirecting users to a fake Microsoft website which suggests there's a virus on their PC and prompts them to phone an emergency hotline.

    These are not Fake Windows Updates. Like I said, they don't even involve Windows Update. They are arbitrary pop ups and redirects that occur when you visit shady websites. A better question to ask is why users who don't even have the experience and understanding of how the system works to be able to discern a real, legitimate message from Microsoft from a basic Window.Alert() are browsing the sort of websites that impose pop ups and redirects. It's the same problem that causes people to so easily fall victim to malware via torrents; They basically know just enough to get themselves in trouble. It's like knowing how to put a manual transmission car (to callback a previous thread!) into gear but not knowing how to use the brake.

    There is a very good reason that Browsers have moved their Alert dialogs from standard OS Dialog boxes to boxes contained within the website, and prefixed them with text indicating that the message is coming from the website- it's an attempt to help more informed users who understand the difference.

    And it's hardly limited to tech, either. For every "Microsoft Support" scam that preys on people's ignorance of Windows and computers, there is an IRS Scam that preys on people's ignorance of how the organization works. For example, I know somebody who fell for the IRS scam but was stopped when buying gift cards. It's a somewhat understandable kind of ignorance to not understand the IRS. It's quite another to think they have jurisdiction in Canada. It is this sort of almost wilful ignorance that scams prey on.

    I was trying to dereference Null Pointers before it was cool.