Fake Software updates

Attackers will often disguise malware as legitimate software.  One of the more common tricks, is to mask malware as updates to legitimate software.  So it is important to be cautious when updating software.  You can stumble onto a compromised website or a website with a malicious advertisement that triggers a fake alert asking you update a piece of software.  It may look legitimate, even down to the company's logo, verbiage, etc., but I would avoid updating software that pops-up while surfing the web.  

In the example below, you see a request to update Adobe Flash.  However, the address bar shows an IP address not Adobe's actual website.  I would close your browser and then reopen to start fresh.  If you need to update your Adobe Flash Player, or any other piece of software, I would perform an internet search in your favorite search engine for the software.  Then navigate to the company's website directly to perform the download/update.  In the 2nd picture/example below, I performed a search for "Adobe Flash Player Update" and navigated to Adobe's authentic website and performed the update from there.

One thing I want to point out, and will have a separate blog post for this, pay attention to any added software being included with the update/install.  In the 2nd picture/example, you see Adobe is trying to bundle additional software with the flash update.  If it were me, I would not install the add-ons.  If I wanted the software, I would perform the same steps as described above.  I would navigate to the company's website and download the software from there.  I wouldn't install it as an add-on.

Fake Flash Player update.

Authentic Flash update