Fake Firefox update includes password-stealing trojan

• Fake Firefox update includes password-stealing trojan
  Security specialist Sophos reports that it has discovered new spam email messages that claim to be an advisory related to an update to the open source Firefox web browser. The fake advisory asks users to update their Firefox installations, "for security reasons", and includes a download link to the supposed update.