{"id":47486,"date":"2016-02-10T10:18:30","date_gmt":"2016-02-10T18:18:30","guid":{"rendered":"https:\/\/blogs.mcafee.com\/?p=47486"},"modified":"2025-08-15T07:39:53","modified_gmt":"2025-08-15T14:39:53","slug":"adobe-flash-scareware","status":"publish","type":"post","link":"https:\/\/www.mcafee.com\/blogs\/internet-security\/adobe-flash-scareware\/","title":{"rendered":"Phony Adobe Flash Update Hosts Malware, Targets Apple Users"},"content":{"rendered":"

Computer maintenance is often a simple equation: avoid behavior that might land you a virus, and keep your software up-to-date. Thanks to security update pop-up reminders, the latter is usually an easy step. However, while these alerts may be helpful to you as a user, not all of them are to be trusted.\u00a0Take, for example, a fake version of an Adobe Flash update<\/a> that recently surfaced.<\/p>\n

This phony pop-up appears on Apple users\u2019 browsers, alerting them to download the latest update for Adobe Flash Player. Unfortunately, the download is a 2-for-1 deal: when users click on the update, they end up downloading malware<\/a> right alongside it.<\/p>\n

And it turns out it\u2019s not just any old malware\u2014it\u2019s scareware<\/a>.<\/p>\n

Essentially, scareware is a program that will cause various pop-ups to appear on your screen, claiming your device is infected by a virus. In reality, these alerts are for phony updates in disguise. Before you know it, you\u2019re clicking all sorts of buttons in the hopes of saving your device, but you actually end up infecting your computer with multiple viruses.<\/p>\n

The funny thing is, while the Adobe Flash update is downloaded in a fake bundle (complete with a side of malware), it is a real update nonetheless. You see, the package was signed with a valid Apple certificate, meaning that when downloaded, it would be able to pass security checks. By piggybacking malicious code onto a file with a valid certificate<\/a>, cybercriminals had found an in.<\/p>\n

The good news? Scareware requires your permission to install. That means if you take proper precautions, you can avoid clicking on dangerous links to begin with. Attacks like this one often use social engineering<\/a>, a tactic where cybercriminals manipulate users into clicking on a malicious link (think the bogus \u2018You\u2019ve Won!\u2019 spam emails<\/a>). You, as a user, have a lot more control in this situation than you think.<\/p>\n

Tips to keep yourself protected:<\/h2>\n