|
Security Alert! Ads For Fake Anti-Virus & Anti-Spyware Are Multiplying!!!
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Not long ago one of our clients was browsing the web when a warning popped up on his computer screen, alerting him that his PC had been infected with a virus. Although the alert looked real, he was skeptical and closed the alert by clicking on the "X" in the upper right hand corner of the notice.
Can you guess what happened next? His browser was hijacked, pop up ads started sprouting up everywhere, and he couldn't get any of his programs to work even though he rebooted his machine. Although this is an extreme example, the number of fake anti-virus software scams has increased tenfold in the first quarter of this year.
Court records reveal one instance of why this has become a hot new trend with hackers: One company (Innovative Marketing) took in more than $160 billion worldwide last year "selling" fake anti-virus programs (FAKEAV).
The latest threat, discovered by senior threat analyst Edgardio Diaz and detected by Trend Micro as TROJ_FAKEAV.MSRT, presents itself as a Malicious Software Removal Tool (MSRT), remarkably similar to the tools that Microsoft doles out in its security patch updates.
Here's How They Get You
The following two points can help you ensure the tool you're looking at is the real thing: - The fake MSRT is relatively small with a file size of only 412,672 Bytes. - The real tool is digitally signed, which can be viewed from its Properties page; the fake one is not.
Instead of removing the malware, it scans for installed antivirus products on the affected system.
It then informs the users that the recommended software-Shield EC Antivirus-can remove the malware and goes on to entice them to purchase the said software. It then points them to the billing page where they are asked to pay $99.90 for the product.
These online scammers simply create and place fake ads under the name of well-known anti-virus corporations without their permission, and without the knowledge of the site selling the ads. But instead of installing a legitimate anti-virus program, it installs a virus that either instantly infects the PC or creates a warning that then sells the user a fake clean-up program.
How to Avoid Getting Tricked
Many "reputable" sites are compromised and the owners don't know it. So it's not always where you surf. Here are four tips that may help you avoid getting infected.
1. Keep your computer updated with the latest anti-virus and anti-spyware software, and be sure to use a good firewall. Microsoft Security Essentials is free and great at catching this type of invader. 2. Never open an email attachment unless you are POSITIVE about the source. 3. Do NOT click on any pop-up that advertises anti-virus or anti-spyware software. If a virus alert appears on your screen, DON'T click ON it, even to "close" it. Instead, click the browser "X" button in the far upper right corner of the browser screen. Then call us at 772-287-5215. 4. Do not download freeware or shareware unless you know it's from a reputable source. Many freeware and shareware programs come bundled with spyware, adware, or fake anti-virus programs.
The best prevention is your own skepticism. The rule is: IF IN DOUBT-DON'T!
|