Symantec calls 'SpywareGuard' and 'AntiVirus' top scareware threats

250 fake security programs detected over six months

Fake security software "SpywareGuard" and "AntiVirus" are said to be the top two scareware programs out of about 250 fake security programs detected, according to a Symantec report.

Symantec examined evidence of what it could detect online for a six-month period, how it was propagating, and what fake security software programs were costing, says Mark Fossi, editor of the report. "Sometimes it’s sold as a complete security suite," he said, adding, "it mostly does nothing."

Rogue security software is often called scareware because these fake antivirus and registry cleaners can convince the victim to purchase based on flagging screens warning them about threats that don't exist outside the scareware itself.

According to the Symantec report: "There are two prevalent ways in which rogue security software can be installed on a user's computer; either it is downloaded and installed manually by a user after he or she has been tricked into delivering the software as legitimate, or it is knowingly installed onto a user's computer, such as when a user visits a malicious Web site designed to automatically download and install illegitimate applications."

Some scams even return e-mail messages to the victim with a receipt for purchase that includes a serial number and a valid functioning customer-service phone number.

Distribution networks are rampant in which "affiliates" earn money to ensure the rogue security software is circulated, such as Traffic.Coverter.biz, where affiliates are paid based on numbers of computers they manage to get malware on to enable the sale of fake security software. Affiliates are paid 55 cents for each U.S. computer, 52 cents for a U.K. computer, 5 cents for Norway or Mexico, but only a penny in many other countries.

SpywareGuard2008, said to be made by Pandora Software, was called the most prevalent rogue security software for the time period investigated, and its price started at $49.95.

Customers often pay for scareware with credit cards, and the report notes, "Since the payment services used are often legitimate, there is constant threat that the payment services provider will discover that its service is used for fraud."

But "scammers also benefit from phishing personal information for users who register rogue applications." This could include the credit card number and payment details that can be sold into the underground economy for further abuse.

About half the servers for scareware are in the United States, the report says, with Germany holding 11% and Ukraine 5%. Other countries are said to include Canada, the United Kingdom, China, Turkey, Netherlands, Italy and Russia, making it very global in scope.

Join the PC World newsletter!

Error: Please check your email address.

Tags symantecsecurity

Our Back to Business guide highlights the best products for you to boost your productivity at home, on the road, at the office, or in the classroom.

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Ellen Messmer

Network World
Show Comments

Most Popular Reviews

Latest News Articles

Resources

PCW Evaluation Team

Azadeh Williams

HP OfficeJet Pro 8730

A smarter way to print for busy small business owners, combining speedy printing with scanning and copying, making it easier to produce high quality documents and images at a touch of a button.

Andrew Grant

HP OfficeJet Pro 8730

I've had a multifunction printer in the office going on 10 years now. It was a neat bit of kit back in the day -- print, copy, scan, fax -- when printing over WiFi felt a bit like magic. It’s seen better days though and an upgrade’s well overdue. This HP OfficeJet Pro 8730 looks like it ticks all the same boxes: print, copy, scan, and fax. (Really? Does anyone fax anything any more? I guess it's good to know the facility’s there, just in case.) Printing over WiFi is more-or- less standard these days.

Ed Dawson

HP OfficeJet Pro 8730

As a freelance writer who is always on the go, I like my technology to be both efficient and effective so I can do my job well. The HP OfficeJet Pro 8730 Inkjet Printer ticks all the boxes in terms of form factor, performance and user interface.

Michael Hargreaves

Windows 10 for Business / Dell XPS 13

I’d happily recommend this touchscreen laptop and Windows 10 as a great way to get serious work done at a desk or on the road.

Aysha Strobbe

Windows 10 / HP Spectre x360

Ultimately, I think the Windows 10 environment is excellent for me as it caters for so many different uses. The inclusion of the Xbox app is also great for when you need some downtime too!

Mark Escubio

Windows 10 / Lenovo Yoga 910

For me, the Xbox Play Anywhere is a great new feature as it allows you to play your current Xbox games with higher resolutions and better graphics without forking out extra cash for another copy. Although available titles are still scarce, but I’m sure it will grow in time.

Featured Content

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?