Stupid Rogue Trick

Newsfeed

Nachrichtenbote
We came across a rogue today called Antivirus Professional 2008 that uses GeoIP Lookup as part of its scare tactics.

This site uses Flash and script to create the effect of an online scan, that then attempts to push an installer at the visitor.

The NoScript extension for Mozilla Firefox is an excellent way to mitigate against this kind of garbage.

AntivirusProfessional2008_Helsinki.png


But here's the interesting thing…

The "antivirus online scanner" site now uses the visitor's IP address to customize the so-called threat.

Oh no. Trojan.Helsinki.Downloader.26.

Trojan_Helsinki_Downloader_26.png


Refreshing the page regenerates the supposed threat.

AntivirusProfessional2008_Helsinki.gif
On 10/11/08 At 02:02 PM



Weiterlesen...
 
Zurück
Oben