Fake Software Updates

The Fake Update Trick

Attackers create pop-ups and web pages that look like software update prompts. They tell you that your browser, Flash Player, video codec, or other software is out of date. When you click "Update," you download malware instead.

Common Fake Update Scenarios

• "Your Flash Player is outdated": Flash Player was discontinued in 2020. Any prompt to update it is fake.
• "Update your browser to view this content": Real websites do not require browser updates to work.
• "Video codec required": Modern browsers play videos without extra software.
• "Java update required": Legitimate Java updates come from your system, not websites.
• "Windows Defender update": Windows updates itself through Windows Update, not browser pop-ups.

How to Spot Fake Updates

Look for these warning signs:

• The prompt appears on a random website, not from your operating system
• The design looks slightly off or outdated
• The download comes from an unfamiliar website, not the official software vendor
• The prompt uses urgent language like "Update now!" or "Critical security update!"
• The file downloads immediately without going to an official download page

Where Real Updates Come From

Legitimate software updates come from specific places:

• Browser updates: Your browser updates automatically or notifies you in its own interface, not through website pop-ups
• Windows updates: Through Windows Update in Settings
• macOS updates: Through System Settings or System Preferences
• App updates: Through the App Store or the application's own update mechanism

Rule of thumb: If a website tells you to update something, ignore it. Check for updates through your system settings or the official software instead.

What to Do If You See a Fake Update Prompt

1. Do not click the "Update" or "Download" button
2. Close the tab or browser window
3. If you are concerned about a real update, go directly to the software vendor's official website
4. Run a security scan if you accidentally downloaded something

What If You Already Clicked?

If you downloaded and ran a fake update:

• Disconnect from the internet immediately
• Run a full scan with your security software
• Change passwords for important accounts from a different device
• Monitor your accounts for suspicious activity
• Consider having a professional check your computer

Key Takeaways

• Flash Player is dead. Any Flash update prompt is malware.
• Real updates come from your system or the official software, not random websites
• Close fake update prompts without clicking anything
• When in doubt, update through official channels