Les vulnérabilités du VPN vous préoccupent ? Découvrez comment profiter de notre solution de migration VPN qui inclut 60 jours de service gratuit.

Blog Zscaler

Recevez les dernières mises à jour du blog de Zscaler dans votre boîte de réception

S'abonner
Recherche sur la sécurité

Fake AV: New Look & Feel

image
JULIEN SOBRIER
juillet 27, 2010 - 1 Min de lecture

I recently stumbled upon a new type of fake AV page. This one looks like the store front of an anti-virus vendor.

Image
New fake AV look & feel

The page is animated and displays a fake AV scanner in action. At the end of the animation, the user is warned that several viruses were found on the user computer and the page attempts do download a fake anti-virus binary named: antivirus.exe. Strangely, the "Download for free" image is not clickable.

Image
Popup is followed by an attempt to download fake antivirus

The page is hosted on scanerzone.cz.cc. At the time it was found, neither Google Safe Browsing (Firefox, Safari, Chrome) or Internet Explorer SmartScreen filter block the page. The malicious executable is detected by 12 antivirus vendors out of 42.I was lead to this page through a spam SEO link in a Google search. However, unlike most other fake AV pages, direct access to the page displays the fake antivirus page. A similar page can be found on bestmalwarescaner.cz.cc, the domain is currently blocked by Google Safe Browsing.

 -- Julien

form submtited
Merci d'avoir lu l'article

Cet article a-t-il été utile ?

dots pattern

Recevez les dernières mises à jour du blog de Zscaler dans votre boîte de réception

En envoyant le formulaire, vous acceptez notre politique de confidentialité.