Fake advisory asks users to update their Firefox installations for security reasons. Email includes a download link to the supposed update. The download leads to an executable file that bundles an installer for the Windows version of Firefox 5.0.1 and a password-stealing trojan (Troj/PWS-BSF) Sophos says users should always exercise caution when clicking on links in emails. Users can download the latest stable version of the Firefox web browser directly from the Mozilla project. Alternatively, users can upgrade to the new versions either by waiting for the automated update notification.”]