Actually I have FF set to notify me of (but not install/download) updates.
When this happens it's just a little, innocuous "toast" style popup in the lower right corner of the program saying "Firefox Version X.X is available" or something like that.
I would certainly be wary of a big bold popup. Good to know though.
I will recommend that you add AdBlock+ and Noscript to your FF addons. Most of that crap worms it's way in through ads and whatnot. Those two addons have helped keep pretty much all of that type of gack away for almost a decade now. I don't think I've ever gotten a legit positive virus/malware/etc detection since I've been using them (touch wood... which is what "she" said... or so I've heard).
Anyhoo... good heads up...
and don't forget to put on yer internet rubbers, lads.