Member Avatar for Jenny76

Hi, every. Im new around here. I just read about this article today and it got me thinking that why would some fellows still choose to download some updates or plugins or video player from some websites of strange names? isn't that too obvious a lie?

  • 3 Contributors
  • 2 Replies
  • 307 Views
  • 1 Month Discussion Span
  • Latest Post Latest Post by Nick_10

Dani AI

Generated

Fake-update pages work because they exploit predictable human shortcuts: urgency, familiarity and impatience. ’s example is a classic typosquat/fake‑download trick; as points out, curiosity and habit lead people to click, and is right that many just want the quickest route to play a video or get a plugin. Attackers pair convincing button art with look‑alike domains and bundled installers so a malicious file appears legitimate.

Practical checklist you can use right now:

  1. Never accept an unexpected “update” from a webpage — close the tab and don’t click the button.
  2. Update from the program itself (Help → Check for updates), from your OS/app store, or by typing the vendor’s official URL yourself.
  3. Before running any installer, verify the digital signature (Windows: Right‑click → Properties → Digital Signatures) and, if available, compare the file hash to the vendor’s published checksum.
  4. Scan new downloads with antivirus / a sandbox or test them in a VM if unsure.
  5. Reduce exposure: enable automatic updates when safe, use a script/ad blocker, and avoid random “codec” or “video player” sites.

Quick command to get a SHA256 on Windows PowerShell:

Get-FileHash -Algorithm SHA256 "C:\Users\You\Downloads\installer.exe"

Compare the resulting hex string with the vendor’s published checksum; a mismatch is a clear red flag.

If a suspicious installer has already run, disconnect, run a full AV scan plus a second‑opinion scanner, and consider restoring from a clean backup if you see signs of compromise. For admins, enforce patch management and application whitelisting; for home users, the combination of built‑in updaters, basic blockers, and a bit of caution stops most fake‑update attacks.

Recommended Answers

All 2 Replies

Member Avatar for Reverend Jim

Never underestimate human stupidity. A while back a security company showed how vulnerable a government building's compter system was. This was after the IT department claimed that they were bullet-proof. What high-tech technique did they use? They left USB memory sticks on the ground in the parking lot. Curious employees, on finding the sticks, couldn't resist plugging them in once they got to their desks.

I tell my father-in-law the danger of downloading and installing software. And every three months or so I have to wipe his system and restore a good image because he has pooched his laptop with a thousand or so pieces of adware, spyware, malware, etc. from downloaded software.

Recently he got a pop-up from his anti-virus software warning him that the website he was trying to go to was a known source of (paraphrased here) bad shit and stuff. I asked him what he did in response and he said "I clicked GO THERE ANYWAY".

Now go back and reread my first sentence.

Member Avatar for Nick_10

Maybe most people always ignore that thing but just want to update their Java quickly, who knows?

Edited by Nick_10
commented: confirmation of the prior post -3
Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.