{"id":9761,"date":"2013-03-09T04:09:50","date_gmt":"2013-03-09T12:09:50","guid":{"rendered":"http:\/\/37prime.wordpress.com\/?p=9761"},"modified":"2013-03-09T04:09:50","modified_gmt":"2013-03-09T12:09:50","slug":"scam-alert-movieplayerupdate-com-and-videoplayerdownload-co","status":"publish","type":"post","link":"https:\/\/37prime.com\/news\/2013\/03\/09\/scam-alert-movieplayerupdate-com-and-videoplayerdownload-co\/","title":{"rendered":"Scam Alert: movieplayerupdate.com and videoplayerdownload.co"},"content":{"rendered":"

A Mozilla Firefox user reported popup ads<\/a> from movieplayerupdate.com (movieplayerupdate.com\/mtrack\/free_download\/1\/pre\/).
\nAnother Mozilla Firefox user also reported the popup ads<\/a> from movieplayerupdate.com (movieplayerupdate.com\/flashplayer\/download_free\/).<\/p>\n

Both links now show 404 not found, but not before we managed to grab a screenshot. It says:<\/p>\n

http:\/\/ movieplayerupdate.com<\/p>\n

WARNING! Your Flash Player may be out of date. Please update to continue<\/p><\/blockquote>\n

\"movieplayerupdate_dot_com\"<\/p>\n

The site is also telling user:<\/p>\n

Please Install Flash Player Pro to Continue<\/p><\/blockquote>\n

Remember folks, there is no such thing as “Flash Player Pro”.<\/p>\n

The links on both “REMIND ME LATER” and “INSTALL” point to: mtrack10.com\/base2.php<\/p>\n

By clicking either button, an executable file will be downloaded.<\/p>\n

\"movieplayerupdate_dot_com-scam\"<\/p>\n

A user sent us a note that similar popups from videoplayerdownload.co were found (videoplayerdownload.co\/free-download\/mt\/1\/pre\/).<\/p>\n

\"videoplayerdownload_dot_co-scam\"<\/p>\n

The “Install Now” link also points to mtrack10.com\/base2.php<\/p>\n

\"videoplayerdownload_dot_co\"<\/p>\n

It seems that both movieplayerupdate.com (whois info<\/a>) and videoplayerdownload.co (whois info<\/a>) are registered by the same individual through GoDaddy on the same day (Feb 20, 2013).<\/p>\n

The domain mtrack10.com (whois info<\/a>) is also registered through GoDaddy one week earlier (Feb 14, 2013).<\/p>\n

By clicking the “Install Now” button, an executable file will be downloaded.<\/p>\n

——-<\/p>\n

It is pretty obvious the individuals behind the domain names mentioned above are unscrupulous. Do not blindly download some programs just because a popup told you so.<\/p>\n

To update Flash Player, download it direct from Adobe.<\/p>\n

http:\/\/www.adobe.com\/products\/flashplayer\/distribution3.html<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

A Mozilla Firefox user reported popup ads from movieplayerupdate.com (movieplayerupdate.com\/mtrack\/free_download\/1\/pre\/). Another Mozilla Firefox user also reported the popup ads from movieplayerupdate.com (movieplayerupdate.com\/flashplayer\/download_free\/). Both links now show 404 not found, but not before we managed to grab a screenshot. It says: http:\/\/ movieplayerupdate.com WARNING! Your Flash Player may be out of date. Please update to continue … <\/p>\n

Continue reading “Scam Alert: movieplayerupdate.com and videoplayerdownload.co”<\/span><\/a><\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[946,4],"tags":[261,1147,1966,2374,2511,2619,2648,936,3033],"class_list":["post-9761","post","type-post","status-publish","format-standard","hentry","category-announcements","category-news","tag-adobe","tag-flash","tag-malware","tag-popup","tag-resources","tag-scam","tag-security","tag-tech","tag-trojan"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/pcNtU-2xr","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/37prime.com\/news\/wp-json\/wp\/v2\/posts\/9761","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/37prime.com\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/37prime.com\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/37prime.com\/news\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/37prime.com\/news\/wp-json\/wp\/v2\/comments?post=9761"}],"version-history":[{"count":0,"href":"https:\/\/37prime.com\/news\/wp-json\/wp\/v2\/posts\/9761\/revisions"}],"wp:attachment":[{"href":"https:\/\/37prime.com\/news\/wp-json\/wp\/v2\/media?parent=9761"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/37prime.com\/news\/wp-json\/wp\/v2\/categories?post=9761"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/37prime.com\/news\/wp-json\/wp\/v2\/tags?post=9761"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}