The results of a Google study, released on the 28th April 2010, show that fake anti virus software is increasing. Often referred to as scareware, these programs can infect computers by tricking users into downloading malicious software to "fix" non-existent viruses and malware. What did Google learn, how do these systems work and why do people fall for them?
Fake Anti Virus Software Accounts for 15% of Malicious Software on the Internet
The Google study lasted 13 months (between January 2009 and February 2010) and examined 240 million web pages. It concluded that fake anti virus programs accounted for 15% of online malware and that 11,000 web domains were involved in the spread of this kind of program.
The study also showed that Windows users were the most targeted and that over half of these programs were delivered via adverts. Catching the people responsible is made much harder, even though Google has measures in place, because they rapidly switch sites across different domains to avoid detection.
How do Fake Anti Virus Malware and Scareware Work?
A fake anti virus program may first appear as a legitimate looking pop-up window that tells the user that they have a dangerous virus. They are then prompted to click to buy anti virus protection to sort out their system. There is, however, no virus at all but the advert contains a potential problem if the user then clicks on it.
Clicking may then simply download malware on to the system. This may install malicious code that disables/damages the computer or that steals personal data. Or, as is often the case, the user will go through to a site where they enter credit card details to buy the supposedly legitimate anti virus software. Their financial details may then be stolen by the scammers and they may still be left with residual malware on their machines.
Why do PC Users Fall for Fake Anti Virus Programs?
According to the Google study: "surprisingly, many users fall victim to these attacks and pay to register the fake anti-virus software." These programs often succeed in duping PC users because they use scare tactics. Those that don't have anti virus protection probably already know that they ought to. Seeing a message, especially if it looks like it comes from a trusted source, may prompt many to take action because they panic and see an immediate fix in front of them.
Malware problems seem to be on the rise in general. For example, a recent Symantec report showed a 71% increase in malicious software and also noted a rise in fake anti virus problems. As is often the case with computer security, preventing problems from occurring is a lot easier than dealing with them after the event.
Users may therefore want to take some time to learn more about fake anti virus and scareware scams to avoid getting into difficulties. Those without anti virus protection may find it useful to put a reputable program in place. Many of the major suppliers in this sector offer free trials and free versions that will give basic protection if cost is an issue.
Sources:
- BBC Online ("Google warning on fake anti-virus software");
- The Daily Telegraph ("Fake antivirus software is 'growing threat' to computer users, warns Google"), Accessed online 29th April 2010.
Join the Conversation