Rogueware distributors use Skype

Rogueware distributors are like the cockroaches of the Internet; they’re everywhere. Malicious search results, online advertisements, and iframe hijacked sites are the typical distribution methods, but every once in a while we come across an interesting approach. Recently, a colleague alerted me of a spam message coming through to his personal Skype account. The message appeared out of nowhere from an account labeled “Online Notification” and made the typical claims of a found infection. Once the victim navigates to the site, the usual fake antivirus trickery takes place. Skype isn’t the most reliable or innovative distribution method, but we’ll go ahead and give them an "A" for effort.
source

Tags: ,

Posted under Malware Alerts

This post was written by Ted on December 18, 2009

Tags: ,

Rogueware with new Ransomware Technology™

The criminals behind Rogueware attacks are becoming increasingly aggressive in their approach to make money. We recently stumbled across a sample (Adware/TotalSecurity2009) which uses a ransomware technique to improve its sales. Once the computer becomes infected, Total Security forces the victim to purchase it before it will allow any files from being accessed on the system. When attempting to open a file, a message pops up in the notification area claiming that the application was blocked due to infection. The pop up recommends activating the "antivirus" software, which costs $79.95. This would be a devistating blow to any user and would likely force the victim to purchase it, so we went ahead and cracked the sample to reveal all of the valid serial numbers. We're hoping that victims can find this blog post before shelling out any hard earned cash to these criminals. Watch the video to see it in action: Valid serials for Adware/TotalSecurity2009:WNDS-TGN15-RFF29-AASDJ-ASD65 WNDS-U94KO-LF4G4-1V8S1-2CRFE WNDS-6W954-FX65B-41VDF-8G4JI WNDS-G84H6-S854F-79ZA8-W4ERS WNDS-TTUYJ-7UO54-G561H-J1D6F WNDS-A1SDF-6AS4D-RF5RE-79G84 WNDS-A1SDF-RY4E8-7U98D-F1GB2 WNDS-5SRTS-AEHUF-YA54S-D6F35 WNDS-P9685-4H41A-DSW3A-2R64T WNDS-2AE32-1VFC2-B6894-G67YU WNDS-4TS8R-D6F5D-4JH8T-U4JK5 WNDS-FGS5D-649RG-4S53D-412SF WNDS-452S3-ER00F-TSE35-S8FSD WNDS-SERFH-2642S-F04SD-64FG1 WNDS-F40SA-1ER5H-4FG5D-F8412 WNDS-5D1V2-XB0D5-JT1TY-97DS3 WNDS-4BGY2-JY4KO-IT98Y-7HJ43 WNDS-G8FB6-1V87S-DRT1S-63SRG WNDS-HFVDR-9844O-U54DA-5TBSC WNDS-89OF7-7324R-5SAD4-TG68U WNDS-JUYH3-24GHJ-HGKSH-FKLSDYou can download a free trial to completely remove the infection once the ransomware feature is removed.Special thanks to Sherab Giovannini for extracting the serials.
source

Tags: , ,

Posted under Malware Alerts

This post was written by Ted on December 18, 2009

Tags: , ,

NoMalware Announces Free Virus and Spyware Removal Tools (PRWeb via Yahoo! News)

NoMalware®, leading antivirus software company, announces innovative free anti virus protection tools.
source

Tags: ,

Posted under Spyware in the News

This post was written by Ted on December 17, 2009

Tags: ,

Blackhat SEO Aggressively Targets Halloween Related Keywords

Cyber criminals behind the Rogueware epidemic have been hard at work in poisoning search results to increase traffic to their campaign sites. Today, we identified a new Blackhat SEO campaign, which is currently targeting Halloween related keywords aggressively. While studying the campaign, I noticed that the most commonly targeted keywords were classic costume favorites, such as the Cat woman costume, vampire costume, and various adult costumes. In addition to costumes, the BHSEO campaign also targets Halloween related food recipes, haunted house directions, Halloween parties, and the movie Halloween. Tainted search results:Fake Antivirus site:Tag cloud of targeted search terms:As we have documented in prior blog posts, Blackhat SEO continues to be one of the most prevalent and pervasive attack vectors on the Internet today. As users, we tend to trust search engines to provide safe and accurate search results, but the reality is that today, search engines are becoming the most dangerous way to browse the Internet.
source

Tags: ,

Posted under Malware Alerts

This post was written by Ted on December 17, 2009

Tags: ,

Black(hat) Friday

If you plan on shopping online for "Black Friday", or "Cyber Monday", you might be in for more than you bargained for.? Cyber criminals behind the Rogueware epidemic have their blackhat SEO campaigns optimized to take advantage of deal seekers looking for advertisements online.? One misstep and you just might find yourself staring at a scareware site designed to trick you into believing that your computer is infected. Google Search:Fake Antivirus Page: We are constantly monitoring this and other Blackhat SEO campaigns to protect our customers against the latest malware attacks on the Internet. If you are not a customer yet, we recommend at least installing our free Cloud Antivirus protection. We also recommend adding an extra layer of browsing protection with safer browsing technology, such as the community driven system provided by our partner, Web Of Trust.
source

Tags: , ,

Posted under Malware Alerts

This post was written by Ted on December 16, 2009

Tags: , ,

Page 4 of 34« First...23456102030...Last »