A lot of people are getting hit by this, so a quick heads-up.



You're on a normal-looking website and a pop-up appears: "Your browser is critically out

of date — update now." You click it, download the file, run it — and you've just installed

malware yourself. Security researchers call this SocGholish; it's one of the most common

fake-update lures around, and it often runs on legitimate sites that got compromised.



How to know it's fake every time:



\- Real browsers (Chrome, Edge, Firefox) update themselves, silently, in the background.

  They never make a \*website\* pop up telling you to download an update.

\- The download isn't from google — it's a random or lookalike domain serving an .exe/.dmg.

\- It leans hard on urgency: "critically out of date," "your data is at risk."



How to actually update:



\- Open your browser's own menu → Settings → About \[Chrome/Edge/etc.\]. It checks and

  updates there, and only there.

\- If a webpage tells you to update, just close the tab. Nothing bad happens from ignoring it.



Curious if others have seen this lately — what site were you on when the fake update popped up?

\[17.0\]   "A website says your browser's out of date — and that 'update' button is the virus. Here's how to tell."

\[17.1\]  "Real browsers update themselves, silently, in the background. They never make a website pop up and tell you to download one."

\[17.2\]  "That 'Update' button isn't from Google — it's a hacked site handing you malware you install yourself."

\[17.3\]   "So the rule: a browser update from a webpage is always fake. Close the tab."

\[17.4\]  "Need to actually check? Your browser updates in its own menu — Settings, then About. Only there."

\[17.5\]   "Save this so you don't click it. Follow — a new scam every day."



[MY]PSA: 'your browser is out of date, update now' pop-up is malware — and here's how to actually update midpennbank.com