Fake AV scammers impersonate Microsoft
Posted on 02.05.2013
Cyber scammers continue to impersonate Microsoft and try to trick users into believing that their computer is serious need of an AV solution.

Webroot researchers have spotted an active campaign that involves an ever-rotating slew of websites sporting a warning mimicking a Microsoft Security Essentials alert:

"There are a number of ways to figure out that this is a false alert," the researchers point out. "The first is that itís a website message and not a program; the second is that location of the web site will be a random string of letters."

Still, there are users who will fall for it and press the "Clean computer" button, and end up downloading an executable that currently drops a fake malware removal tool ("XP Security Cleaner Pro") on the victim's computer and several more malicious files

The fake AV then flags innocuous software as malware and asks user to pay for its removal.

The researchers believe that potential victims are redirected to the fake web pages via malicious ad links. The pages stay active for 24-48hrs before being pulled down, and currently lead to fake AV, but the payload can be changed by the crooks at will and at any moment.

If you're faced with one of these pages, closing it without clicking on it will allow you to avoid being infected. If you have downloaded the malware, you will have to use a legitimate tool to remove it from your system (more experienced users can do it manually).


Using Hollywood to improve your security program

Posted on 29 July 2014.  |  Tripwire CTO Dwayne Melancon spends a lot of time on airplanes, and ends up watching a lot of movies. Some of his favorite movies are adventures, spy stuff, and cunning heist movies. A lot of these movies provide great lessons that we can apply to information security.

Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.

Daily digest

Receive a daily digest of the latest security news.


Wed, Jul 30th