Unfortunately, because Flash Player is widely distributed, it's a popular target for impersonation by bad actors (see: Phishing - Wikipedia, the free encyclopedia)​ . We have strict and redundant security controls in place to ensure that the software we ship is authentic and free of malware, but that doesn't help if you're getting it from another source.
In general, humans are easier to defeat than modern software security. Attackers will frequently design fake Flash Player update popups, and many even wrap totally legitimate Flash Player installers inside their malware distribution. Sometimes they're distributed on perfectly legitimate websites through fake ads, or bugs that allow attackers to post executable javascript. As the user, you see a legitimate-enough looking dialog, click a button on a third-party website, it takes you to a random website with a download, and you get a working Flash Player with a side of malware.
A couple things that will help you avoid this situation in the future:
- Always download software directly from the manufacturer's website or if it's available, via the AppStore for your operating system, and never follow links in pop-ups or email.
- When you do the installation, check "Allow Adobe to install Updates (recommended)", and let our automatic updater do it's thing.
- This will ensure that you have the lastest, most secure version
- Assume any upgrade notifications that you get are sketchy.
- If in doubt, open a new window and type in the URL above, This holds true for other software as well. Don't follow links to downloads. Use Google or another trusted source to ensure that you're not getting an impostor distribution.
- Use a browser that bundles Flash Player as a built-in component, like Google Chrome, or IE/Edge on Windows 8 and higher
- There's nothing separate to download or install. It's pre-packaged, and the browser or operating system handles the updates.
2
Replies
AdChoices