Fake antivirus targets Firefox users





Fake AV asks to be downloaded and then runs a scan designed to trick users into thinking that the fake AV is actually scanning their PCs

Users of the popular Mozilla Firefox web browser have been targeted by a new scam that tries to load a user's PC with fake antivirus (AV) software. The software is found on a fake Windows Update page.

This latest scam has been discovered by security firm Sophos who says that the attack triggers when encountering a Windows-based PC user using the Firefox web browser. When the page - which is a copy of the real Windows Update page - loads within Firefox, it offers users an ‘urgent' 2.8MB download, which if downloaded will load the fake antivirus software on the user's machine. This then runs a scan which is designed to make the user believe that the fake antivirus software is actually looking for viruses on the machine.

"Users need to be more vigilant than ever before as bogus security alerts pop-up in their browsers," said Graham Cluley of Sophos. "Fake anti-virus attacks are big business for cybercriminals and they are investing time and effort into making them as convincing as possible."

Users of the popular browser are frequently targeted by such scams. Sophos last week reported a separate scam that sent users of the browser messages to make them believe their computer is infected with a virus.

Sophos warns Firefox users of scareware

Malicious programme gets users to download fake virus scans then pay for them

Sophos is warning Firefox users to be vigilant after it discovered an advanced scareware campaign which sends Firefox users messages to make them believe their computer is infected with a virus.

The scareware looks like a genuine Firefox security alert and displays a realistic system scan window, which displays a progress bar and the names of malware supposedly found on the users system.

Scareware often tries to part users from their cash by persuading them their computers are under attack and infected when they are not.

Scareware is often planted on websites as pop-up advertisements or disguised downloads, but can also be sent out as spam by cyber criminals.

"Taking advantage of detailed information about the person's computer and software allows for a much more specific, believable social engineering attempt," said Chester Wisniewski, senior security advisor at Sophos. "We are likely to continue to see these criminals targeting each operating system, browser and any other details that can be gleaned from HTTP requests sent from our devices."

References:










Review abopress.blogspot.com on alexa.com

Comments

Popular posts from this blog

Benefits of SMS Marketing for Small Business

SETUP AND CREATE YOUR BUSINESS MARKETING BLOG

De Kare-Silver’s electronic shopping test