- Mar 15, 2011
- 13,070
After masquerading rogue antivirus as Microsoft Security Essentials and a range of additional genuine security solutions, cybercriminals are even copying the Microsoft Update site with the latest fake AV attack targeted at users of Firefox on Windows.
Chester Wisniewski, a Senior Security Advisor at Sophos Canada is warning of the new “distribution model” of a fake antivirus which attempts to fool customers into thinking they’re actually downloading and installing a security solution from Microsoft Update.
The attack originates from a source that is distributing fake AV, targeting Windows users, both those running Internet Explorer and Firefox.
A previous attack from the same cybercriminals involved fake security alerts provided inside Firefox. This time around, they’re trying to spread a rogue AV through a fake Microsoft Update site.
“The page is nearly an exact replica of the real Microsoft Update page with one major exception... It only comes up when surfing from Firefox on Windows,” Wisniewski explained.
“The same site was also hosting the traditional Windows XP explorer scanner we have seen for years, as well as a new Windows 7 scanner.”
More Info