McAfee Warns of Scareware in its first Consumer Threat Alert
** Consumer Threat Alert ** Consumer Threat Alert **
Fake Anti-Virus Software Scams On The Rise
“Scareware” offering computer users fake anti-virus and anti-spyware software has more than doubled since the first quarter of 2009, affecting around 69,000 people in the U.S. alone, McAfee Labs reports.
The Hook: Scammers prey on consumers who are concerned about protecting their machines by trying to “sell” them fake security software or by warning them that their computer has been infected and they have to pay to fix the problem. The goal of the cybercrooks is to get you to provide your credit card information or give them access to your machine so they can perform nefarious tasks.
The Methods: Scammers invite you to click on links in misleading pop-up and banner ads, or offer free downloads that have malware attached.
The Dangers: Falling for these scams can lead to your credit card being stolen, identity theft or your computer being compromised.
Bottom Line: Only download, purchase, and use security software provided by established and well-known security vendors. Security software should only be purchased by going directly to the vendor’s legitimate website or through authorized retail outlets.
Watch the video below to learn from the real-life experience of a “scareware” victim.
Here are some common scams to watch out for:
Scam #1 – The Fake Scan Scam
What is the scam?
Cybercriminals offer free antivirus downloads and fake virus scans of your computer that cause you to download malicious files and viruses, and entice you to provide your credit card information.
How it works:
1. Scammers invite you to click on a link to get a “free scan” of your computer.
2. Once you click on the link, it will start a fake scan. You may see a scan window similar to the one below.
3. After the scan is complete, you will be told that your computer has a number of issues and the program will offer to erase these files from the computer if you install an ActiveX Control.
4. When you install the program, the infection starts: your browser is hijacked or you are shown fake alerts and threat warnings.
5. The program then asks you to purchase or “activate” its security software to rid your computer of these phony threats.
Scam #2 – The Fiendish “Free” Download
What is the scam?
Cybercriminals offer “free” screen savers, music, games or movies from a file-sharing site that are laden with malware (malicious software).
How it works:
1. You download a free screensaver from a seemingly harmless website, not knowing that the screensaver was piggybacked by malware.
2. After the download, you may see a pop-up alert saying that the computer has been infected, like the one below.
3. The alert may also offer to fix the problem, for a fee.
Scam #3 – Misleading Pop-Up Advertising
What is the scam?
Cybercriminals use pop-up ads to coerce you into buying unnecessary security software with the hope of obtaining your credit card information or compromising your computer.
How it works:
1. You click on the link in a pop-up ad and it prompts you to provide your credit card information to “purchase” rogue security software. Clicking on the link may also give the scammers access to your machine, allowing them to turn it into a “zombie” computer, which sends spam to other computers without your knowledge or performs other nefarious tasks.
Tips to Avoid Becoming a Security Software Scam Victim:
1. Before downloading any security software from the Web, get a recommendation from someone you trust who is savvy about Internet security software.
2. Investigate the company before purchasing their software.
3. Be careful when responding to pop-up ads.
4. You can protect your computer from these types of cybercrime by installing a complete security software suite that includes anti-virus, anti-spyware, and firewall protection, such as McAfee Total Protection. Ensure that your software is always up to date (enable the “auto-update” feature) and perform regular scans.
You should also regularly check your security vendor’s website to see what patches are available for your applications (such as Internet Explorer, etc.).
Tips on What to Do If You Have Become a Victim:
You’re a victim, now what?
1. To check if you have malware—or in this case, a known fake anti-virus–installed on your PC, scan your computer for free using the McAfee Stinger tool, go to: http://us.mcafee.com/root/mfs/default.asp?cid=%209913
McAfee Stinger tool, powered by the award-winning McAfee VirusScan engine technology, is not a substitute for complete anti-virus protection, but rather a tool to assist users when dealing with an infected system, search for viruses, including the most recent threats, and displays a detailed list of any infected files.
2. Contact the Cybercrime Response Unit at www.mcafee.com/cru, a free online help center for advice and technical assistance if you think you’ve been a victim of a cybercrime.
To sign up to receive future Consumer Threat Alerts by email from McAfee, go to http://home.mcafee.com/consumer-threats-signup
