Rogue AV Haunts Halloween
Sunday November 1, 2009 at 10:01 pm CST
Posted by Arun Pradeep
Festive search words are a favorite with scammers as a lure to their offerings, as my colleague David Marcus recently warned us about Halloween-themed threats.
In recent research, we have found that search results for “scary halloween pumpkin designs” could lead users to a hijacked web page that hosts rogue security products.


Upon clicking the hyperlink, the user sees a website hosted on xxx.allxxxxxshxxx.com. The site presents a fake “Windows Security Alert” window that is identical to the scam reported by McAfee Labs’ Avelino Rico Jr. in his recent blog. The “alert” warns visitors of fake infections and requires the victims to download a tool to remove them.

What happens after installing this tool is the same as many other rogue AV or FakeAlert stories we’ve reported. This malware is now detected as FakeAlert-JW Trojan.
Watch out for this and other malware during Halloween season, and keep your security products updated.

November 3rd, 2009 at 16:20
[...] Comments Trackback It didn’t take long for spammers to change from Halloween lures to spam and malware. They’ve already moved to the Christmas season, and we have started [...]
November 19th, 2009 at 20:41
I have also seen there are some favourite word of the scammers just like the pumpkin or the Halloween. This tool is really good and prevent us from the scammers.
December 12th, 2009 at 04:01
[...] didn’t take long for spammers to change from Halloween lures to spam and malware. They’ve already moved to the Christmas season, and we have started [...]