Follow Us On :

Security Zone: Faking IT support

In the 1990s, documentation and binaries passed off as being from security companies were used to carry malicious code. Mass-mailing malware and spammed malicious URLs added fake anti-virus (AV) updates and system patches to the mix. In recent years, criminal gangs have misused search engine optimisation (Black Hat SEO) to lure victims onto websites salted with fake anti-malware and other utilities.

Why do we call this rogue AV? These people are not security developers gone bad, however much they may try to persuade us that there is no difference between them and us. And they do: security labs face a lot of threatened and actual legal action from developers claiming their software is legitimate - such threats tie up significant resources.