Consumer Threat Alerts
Are you aware of the latest threats? McAfee Consumer Threat Alerts warn you about the most dangerous ...
** Consumer Threat Alert ** Consumer Threat Alert **
Fake Anti-Virus Software Scams On The Rise
“Scareware” offering computer users fake anti-virus and anti-spyware software has more than doubled since the first quarter of 2009, affecting around 69,000 people in the U.S. alone, McAfee Labs reports.
The Hook: Scammers prey on consumers who are concerned about protecting their machines by trying to “sell” them fake security software or by warning them that their computer has been infected and they have to pay to fix the problem. The goal of the cybercrooks is to get you to provide your credit card information or give them access to your machine so they can perform nefarious tasks.
The Methods: Scammers invite you to click on links in misleading pop-up and banner ads, or offer free downloads that have malware attached.
The Dangers: Falling for these scams can lead to your credit card being stolen, identity theft or your computer being compromised.
Bottom Line: Only download, purchase, and use security software provided by established and well-known security vendors. Security software should only be purchased by going directly to the vendor’s legitimate website or through authorized retail outlets.
Watch the video below to learn from the real-life experience of a “scareware” victim.
Here are some common scams to watch out for:
Scam #1 – The Fake Scan Scam
What is the scam?
Cybercriminals offer free antivirus downloads and fake virus scans of your computer that cause you to download malicious files and viruses, and entice you to provide your credit card information.
How it works:
1. Scammers invite you to click on a link to get a “free scan” of your computer.
2. Once you click on the link, it will start a fake scan. You may see a scan window similar to the one below.
3. After the scan is complete, you will be told that your computer has a number of issues and the program will offer to erase these files from the computer if you install an ActiveX Control.
4. When you install the program, the infection starts: your browser is hijacked or you are shown fake alerts and threat warnings.
5. The program then asks you to purchase or “activate” its security software to rid your computer of these phony threats.
Scam #2 – The Fiendish “Free” Download
What is the scam?
Cybercriminals offer “free” screen savers, music, games or movies from a file-sharing site that are laden with malware (malicious software).
How it works:
1. You download a free screensaver from a seemingly harmless website, not knowing that the screensaver was piggybacked by malware.
2. After the download, you may see a pop-up alert saying that the computer has been infected, like the one below.
3. The alert may also offer to fix the problem, for a fee.
Scam #3 – Misleading Pop-Up Advertising
What is the scam?
Cybercriminals use pop-up ads to coerce you into buying unnecessary security software with the hope of obtaining your credit card information or compromising your computer.
How it works:
1. You click on the link in a pop-up ad and it prompts you to provide your credit card information to “purchase” rogue security software. Clicking on the link may also give the scammers access to your machine, allowing them to turn it into a “zombie” computer, which sends spam to other computers without your knowledge or performs other nefarious tasks.
Tips to Avoid Becoming a Security Software Scam Victim:
1. Before downloading any security software from the Web, get a recommendation from someone you trust who is savvy about Internet security software.
2. Investigate the company before purchasing their software.
3. Be careful when responding to pop-up ads.
4. You can protect your computer from these types of cybercrime by installing a complete security software suite that includes anti-virus, anti-spyware, and firewall protection, such as McAfee Total Protection. Ensure that your software is always up to date (enable the “auto-update” feature) and perform regular scans.
You should also regularly check your security vendor’s website to see what patches are available for your applications (such as Internet Explorer, etc.).
Tips on What to Do If You Have Become a Victim:
You’re a victim, now what?
1. To check if you have malware—or in this case, a known fake anti-virus–installed on your PC, scan your computer for free using the McAfee Stinger tool, go to: http://us.mcafee.com/root/mfs/default.asp?cid=%209913
McAfee Stinger tool, powered by the award-winning McAfee VirusScan engine technology, is not a substitute for complete anti-virus protection, but rather a tool to assist users when dealing with an infected system, search for viruses, including the most recent threats, and displays a detailed list of any infected files.
2. Contact the Cybercrime Response Unit at www.mcafee.com/cru, a free online help center for advice and technical assistance if you think you’ve been a victim of a cybercrime.
To sign up to receive future Consumer Threat Alerts by email from McAfee, go to http://home.mcafee.com/consumer-threats-signup
Tags: antivirus, fake anti-virus software, fake software, ID theft, McAfee, online threats, rogue anti-virus software, scareware, Viruses
Why not give us a list of known spyware programmes so we can avoid them?
I just got hit by a very good one, using windows symbols & other symbols to look legit. I couldnt close out without buying their software & bing…it changed my proxy setting so I couldnt even get on line, so off to the shop I go to get it removed & computer cleaned & fixed. And canceled my card. Should have listened to my instints!!
Hello – my commputer was recently infected with fake antivirus software. In an attempt to stop it once I realized what was happening, I hit Ctrl+Alt+Delete and then it said my taskmgr.exe file was corrupted and coudn’t open. Then I tried to go to the net andlook up how to stop it, and it said my iexplorer.exe was corrupted and infected and couldn’t open….. long story short, it got into every .exe file I attempted to open. Once you know something not right is going on, shut off the computer and get in safe mode ASAP. Thank God for the people at Norton (no offence McAafee – you’re great we use you at work, but my Vista came with Norton (: !!) They really helped me!
I work with the Geek Squad, and we see these multiple times every day. I work in a small town of about 70,000 and see at least 3/day. They are not usually terribly difficult to remove the immediate threat, but there could be (and usually are) others on the system that you cannot tell are there. \I work with the Geek Squad, and we see these multiple times every day. I work in a small town of about 70,000 and see at least 3/day. They are not usually terribly difficult to remove the immediate threat, but there could be (and usually are) others on the system that you cannot tell are there. “Security Tool” seems to be the most prevalent one, and a new one called “Malware Guard 2010″ decides to give you a fake BSoD (Blue Screen of Death) after you cancel the application to purchase their software. It even claims to dump physical memory during the BSoD, and shows a fake Windows loading bar (similar to the Vista loading bar). Stopping this process is as easy as switching off the computer and taking it to a repair facility and purchasing good antivirus software after it is clean (McAfee, Norton, Kaspersky are the top 3). You can halt the processes by using Task Manager (CTRL+ALT+DEL) and stopping irregular .exe files, then read up on how to remove individual rogue security products (fake virus scanners).
this just happened to us last week. pop-up said it was from windows/security, and had the windows logo, and another logo very similar to mccafee. it listed all of the programs infected and what they were infected with. it took up nearly the whole page. this happened last year, and when we tried to close the page we were infected with the virus, which turned off our mccafee anti-virus protection. we were never asked to purchase, just to click on to get rid of the virus.
Submit your own comments / message for this post