With the recent very malicious scam e-mail which is supposed
to hold a link to the Barack Obama acceptance speech, many people
have been concerned with their Flash Player and it's update
processes. As you know, the scam link takes them to a page but it
notifies them they cannot play the movie without a Flash Player
update. Of course, most people click on the link and instead of a
Flash Player update, they install a key-logger trojan (one report
is of a rootkit).
Since we've informed people of this attack, they have said
they've recently gotten Flash Player pop-ups on their computer with
the notification that they need to update their Flash Player to the
latest version. My Help Desk says that they have never seen that
before, so they are concerned that it is another attack method.
Does Adobe Flash Player check for updates and notify the user
when an update is required?
We've told our customers to go to adobe.com and download
directly from there to ensure there is not a security risk.
However, we know many of them will likely click on links in a
pop-up or e-mail.
Thanks for any insight into this.