Antivirus 2010: A New Low In Fake Antivirus
Tuesday, February 24, 2009
From the malcontents who bring us fake antivirus software comes "Antivirus 2010," a Windows scam so sneaky it puts its predecessors to shame. It looks horrifyingly realistic (see screenshots) and it goes all-out in pretending to be legit:
- Mimics Windows' own Security Center with warnings to register the fake software
- Mimics Internet Explorer errors to imply you need the fake software before you can visit web sites
- Mimics Windows startup screens to imply you can't start your computer without registering the fake software
- Creates phony errors in Windows to imply your computer is unusable without the fake software
- Pretends to find and fix problems that aren't present on your computer
- Offers a realistic-looking web site for download and registration
- Redirects your machine to fake web sites with fake reviews extolling the fake software!
Posted byTriona Guidry at 4:30 PM 0 comments
Labels: alerts, antivirus, malware, scams, scareware, spyware, viruses, windows
Fake Antivirus On Macs
Wednesday, January 28, 2009
It had to happen. Macs are the latest target of fake antivirus software scams.
For some time I've been warning PC users about scareware scams: warnings claiming that your computer is infected and you must buy "Insert Name" antivirus software or you're doomed. Please don't fall for these tricks. There are perfectly good antivirus programs out there that don't advertise via the electronic equivalent of unwanted solicitors.
My current recommendations on Mac antivirus programs are:
- Trend Micro
- AVG
- Avast
- McAfee
- (But not Norton; here's why.)
Posted byTriona Guidry at 5:42 PM 1 comments
Labels: antivirus, mac, malware, pc, scams, scareware, spyware, windows
Phishing Without A Net
Thursday, January 15, 2009
A new method of phishing may be your next battle. Researchers report that scammers can now phish you--pretend to be your bank--while you're logged into your bank's legitimate web site.
Until now, phishing was done by emails that try to trick you into clicking links to phony sites. This new variant is sophisticated and almost invisible, because it doesn't come through email but on the web, and only after you have successfully logged into your bank's actual site. Then malicious code takes over and sends a realistic-looking popup window asking for your credentials. The complexity of this attack makes it difficult to avoid, and switching from Internet Explorer to another browser like Firefox won't help.
This attack isn't widespread (yet), but you can expect more near-invisible scams like this in the future. Be sure to keep your computer updated, and don't forget to subscribe to Tech Tips for the latest computer news.
Posted byTriona Guidry at 4:33 AM 0 comments
Labels: alerts, beginners, Internet, phishing, scams
Malware Via LinkedIn
Monday, January 12, 2009
The word is getting out that phony MySpace and FaceBook profiles can deliver malware (malicious unwanted software, also known as spyware) to your computer. But many business professionals are unaware that similar threats also occur on LinkedIn and other business-oriented social networking sites.
At the moment the LinkedIn versions of these scams are the electronic equivalent of crayon scribbles: amateurish and easy to spot. However, you can expect them to become more prevalent and convincing. From a recent eWeek article:
[A]t the same time that LinkedIn's image makes it unlikely that any large number of people will click on through when profiles are being advertised as celebrity porn, you have to recognize that its business focus could conceivably make the site an even more dangerous weapon in the hands of truly cunning attackers -- who could, say, post a believable profile for a well-known CEO or industry pundit along with links to similarly themed malware URLs.Bad Web links are all over the place, so please be careful when clicking on links, even on reputable sites.
Posted byTriona Guidry at 11:49 AM 0 comments
Labels: alerts, consumers, Internet, malware, scams, small business, spyware
WinAntiVirus Scareware Purveyors Shut Down
Thursday, December 11, 2008
A few months ago I wrote an article in which I mentioned the insidious WinAntiVirus, a phony antivirus program that scams you out of your credit card number and leaves you with an unprotected machine. A federal judge recently shut down two firms alleged to have participated in the spread of this and other fake computer security software, sometimes called "scareware" because it tries to frighten you into installing it.
It's vital that you know what antivirus program you use, and more importantly, that it is legitimate. Do NOT rely on web pop-ups that tell you you're at risk; many of them are bogus. For reliable antivirus, try one of the tools listed under my Windows Help sidebar, such as Trend Micro or the excellent and free AVG.
And don't forget the four legs of our computer security chair: you also need antispyware software and a firewall, and to keep current on your system updates.
Be sure to sign up for the email version of Tech Tips for regular alerts, plus bonus tips and product reviews.
Posted byTriona Guidry at 1:09 PM 0 comments
Labels: antivirus, scams, windows
Beware Online Greeting Cards
Monday, December 1, 2008
'Tis the season... to warn you about online greeting cards.
Once a benign way of waving electronically to friends, online greeting cards have become a common ruse. Many spam messages are sent under the guise of online greeting cards, trying to get you to click on malicious links.
Although some companies, like Hallmark and Bluemountain, are legitimate, scammers may try to fool you into thinking they are these bona-fide services, down to similar wording and logos.
My recommendation is that you avoid online greeting cards period. Bah humbug, perhaps, but I'd rather have you miss out on a greeting card than wind up with a zombied computer or, worse, a stolen identity.
Posted byTriona Guidry at 3:00 PM 0 comments
Labels: alerts, consumers, scams
Software Scams
Tuesday, August 5, 2008
[This article is reprinted from the May 2007 issue of Triona's Tech Tips. Software scams remain a nasty plague on consumers. Be wary of any programs that offers themselves to you via a popup window or flashy Web ad.]
I hate seeing my users scammed. And there are some nasty scams out there, including this tricky one involving the online upgrade of software.
Here's what happens. The user receives a legitimate renewal reminder from his Windows antivirus software. He searches the web for the upgrade, and that's where the scam begins. He clicks on what he thinks is the correct link, and is directed to a website that looks like the right place. He selects his upgrade, puts in his credit card number, and installs the provided program. He is left with a new icon that seems to be doing all the things antivirus software should do. Except it's not antivirus software at all, and that card number just got swiped.
The culprit is "Win AntiVirus," also known as the SmitFraud trojan. This pest mimics the styling of Norton AntiVirus, and it's slick enough to fool almost anyone. The first time I encountered it, I had to do some careful checking to determine it didn't belong.
Since it's not a real antivirus program, "Win AntiVirus" leaves you vulnerable to real viruses. Usually when I find it, it's because I've been called in to fix something seemingly unrelated, like being unable to print. That's just a symptom of the real issue, which is that your computer is now minus its protections and susceptible to whatever comes along. The way search engines like Google work only adds to the problem. The scammers purchase advertising keywords so that when you do a search, their scam link comes up near the top of the list.
Upgrading your antivirus software is an important thing to do, but keep an eye out for tricks like this. When in doubt, type web addresses manually instead of clicking on a link. If you're a Norton user, the place to go is Symantec. McAfee, Trend Micro, and the free AVG and ClamWin programs are all legitimate products as well. The links here on Triona's Tech Tips (see below right, under "Windows Help") will point you to the real deal.
Antivirus is not the only software spoofed. Spyware, the collective term for software you don't want, often has the hubris to masquerade as anti-spyware software. Those free "PC cleaners" you see advertised in spam emails are just trying to get you to install their junk so they can zombie your computer like we discussed a few months ago. I have actually seen such scams advertised on television, no less! Avoid using software that is advertised via spam or pop-ups, and be sure you know whose product you are using. Of course, purchasing from a store is a workaround against online scams.
If you've been victimized, it's time to pull out the big guns to protect your identity: FTC's Identity Theft website. In Illinois, the Attorney General has also set up an Identity Theft hotline at 1-866-999-5630. I don't know what happens to the credit card that was entered, but it can't be good. You also need to clean off your machine, and sadly in the case of "Win AntiVirus," usually the best choice is to reinstall from scratch. Otherwise you'll never know if it's really gone.
We talked before about how to create stronger passwords using my handy tipsheet (PDF). If you haven't had a chance, give it a try. Remembering passwords is much easier than trying to recover a stolen identity!
Posted byTriona Guidry at 9:30 AM 0 comments
Labels: alerts, antivirus, beginners, Internet, passwords, scams, windows