Malware authors use Conficker searches to spread rogue anti-virus

As media coverage increases for Conficker, authors are using search engine optimisation to spread rogue anti-virus software.

Symantec's John Park claimed that searches for Conficker and Downadup are revealing results that are infected with fake anti-virus sites. He revealed that following a result will lead to a malicious link that eventually leads to a rogue application installation website.

Park said: "Let's say you are curious about Conficker, or you think your computer might be infected with Conficker. By simply searching for ‘Conficker C,' page one of the results includes a link to an infected site being used to spread a fake anti-virus program.

"Even though we do not think the author of this rogue application is related to the author of Conficker, this incident shows us that the authors and affiliates of misleading applications don't want to miss a single opportunity to capitalise on established media attention.

"Some obvious words of advice: Be careful with the links you follow. A sincere effort to keep abreast of the latest security information might bring about some unwelcome surprises."


What are your thoughts on this article? Add your comment below.

To begin commenting right away, you can log in below or register an account if you don't yet have one. Please read our guidelines on commenting. Offending posts will be removed and your access may be suspended. Abusive or obscene language will not be tolerated. The comments below do not necessarily reflect the views or opinions of SC Magazine, Haymarket Media or its employees.

NOTE: You must be a registered member of SC Magazine to post a comment.

Click here to login | Click here to register
comments powered by Disqus
Sign up to receive SC Magazine email newsletters
   FOLLOW US...
Most Read