You probably know that all types of malware can get in the system through a download of an application. Instead of a player or a video codec you can download a Trojan which will install another piece of malware that will turn everything up side down. An email attachment might be also a source of the infection. This time, I want to talk about Live Security Platinum, bogus antivirus software, which is known to have used the name of Delta Airlines to get on to a targeted computer.
A user gets an email whose subject is “Ticket is ready”. The attachment which is actually a Trojan that installs Live Security Platinum goes by the name of Ticket_Delta_Air_Lines_IN2139.zip. The text of the letter goes like this:
Hello, E-TICKET / EH065894335
SEAT / 77E/ZONE 2
DATE / TIME 20 JUNE, 2012, 09:55 AM
ARRIVING / Virginia Beach
FORM OF PAYMENT / CC
TOTAL PRICE / 276.42 USD
REF / EF.5709 ST / OK
BAG / 4PC
Your bought ticket is attached to the letter as a scan document. You can print your ticket. Thank you for using our airline company services. Delta Air Lines.
Once the file is extracted, the computer is infected and Live Security Platinum is downloaded on to the computer.
The malware bombards users with imaginary notifications and viruses to scare them into believing that the system is jammed with imaginary infections. The rogue claims that detected infection will be removed as the user activates the rogue, which means that a purchase has to be done. If the user does not know that Live Security Platinum is fake AV, he or she pays the charge and loses his or her sensitive banking data, because every piece of information entered in the purchase form is recorded and sent to the creators of the infection. Scary, isn’t it?
If you do not want to be victimize in this way, be aware of the danger of downloading suspicious attachments that eventually turn out to be malicious applications, which of course should be immediately removed.
The malware presents such false messages:
Warning!
Application cannot be executed. The file rdpclip.exe is infected. Please active your antivirus software.
Warning: Your computer is infected
Detected spyware infection!
Click this message to install the last update of security software
Antivirus protection is disabled. Your PC is unguarded against most known viruses and can be infected. Click “Enable Antivirus Protection” to protect your PC and secure your Internet activity.
Live Security Platinum attempts to trick the user by initiating some system changes that create an illusion that the computer is really infected. More about the characteristics of the rogue you will find here.
According to researches, it is highly advisable to remove Live Security Platinum, because the infected computer cannot be used normally. The best solution to the problem is to use an automatic removal tool that will kill the infection immediately.
0 comments:
Post a Comment