Jump to content


 

Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Who killed the fake-antivirus business?

Started by keyboardNinja , Aug 30 2011 12:19 PM

  • Please log in to reply
14 replies to this topic

#1 keyboardNinja

keyboardNinja

    Bleepin' Ninja

  • BC Advisor
  • PipPipPipPipPipPip
  • 4,813 posts
  • Gender:Male
  • Location:teh interwebz

Posted 30 August 2011 - 12:19 PM

The fake-antivirus business was a big money-maker in the first half of this year. Then, at the end of June, fake-AV products practically disappeared from the web. Was it technology, or does traditional law enforcement deserve the credit?


Full article here: http://www.zdnet.com/blog/bott/who-killed-the-fake-antivirus-business/3832
PICNIC - Problem In Chair, Not In Computer

Posted Image Posted Image

20 Things I Learned About Browsers and the Web

 

  • BC Ads
  • BleepingComputer.com

#2 booterbotter

booterbotter

    Forum Regular

  • Members
  • PipPipPip
  • 299 posts
  • Gender:Male
  • Location:Pearl of the Orient

Posted 30 August 2011 - 02:55 PM

Thanks for the update keyboardNinja.
Though rogue software issues decrease dramatically, zero access rootkit and other nasty rootkits are at large. :o

Patience is a true virtue. Never give up, never surrender.
BleepingComputer.com Message Board Rules

#3 cryptodan

cryptodan

    Bleepin Madman

  • Inactive Staff
  • PipPipPipPipPipPip
  • 19,032 posts
  • Gender:Male
  • Location:Catonsville, Md

Posted 30 August 2011 - 05:33 PM

Nothing killed the Fake AV Market. They are in remission, and will come back later with a new arsenal of fake av products. Its a campaign to re-infect already cleaned machines and to introduce new attack vectors much like the fake flash player installs and malicious video links that exploit old and outdated flash players.

The Russian Business Network and others like it will make a come back.

#4 keyboardNinja

keyboardNinja

    Bleepin' Ninja

  • BC Advisor
  • PipPipPipPipPipPip
  • 4,813 posts
  • Gender:Male
  • Location:teh interwebz

Posted 30 August 2011 - 07:50 PM

@cryptodan, I agree. It's more than likely just a temporary lull.
PICNIC - Problem In Chair, Not In Computer

Posted Image Posted Image

20 Things I Learned About Browsers and the Web

#5 killerx525

killerx525

    Bleepin' Aussie

  • Members
  • PipPipPipPipPipPip
  • 6,396 posts
  • Gender:Male
  • Location:Melbourne, Australia

Posted 31 August 2011 - 02:30 AM

Gulp :mellow:
>Michael
System: CPU- AMD Phenom II X6 1090T Black Edition Oc'ed to 3.8GHz, CPU Cooler- Noctua NH-D14, RAM- G.Skill Ripjaws X F3-12800CL9D-8GBXL 8GB Kit(4Gx2) DDR3 1600MHz, HDD- Western Digital Caviar Black 1TB, GPU- 2x Asus 6950 1GB Crossfire 850/1250MHz, Motherboard- Gigabyte 990FXA-D3, Case- Coolermaster HAF 932, PSU- Corsair TX-750 V2, Soundcard- Realtek High Definition Audio Sound, OS- Windows 8 Pro 64-Bit
Posted Image

#6 Required Field

Required Field

    Forum Regular

  • Members
  • PipPipPip
  • 169 posts
  • Gender:Male

Posted 31 August 2011 - 09:54 AM

I'd like to think that the drop in reported rogues is due at least in part to those of us who have been educating endusers about the threats and their sources. The FBI and Russian raids probably helped, though...;)
"Most quotes attributed to famous people on the internet are fake." -Abraham Lincoln

#7 Eyesee

Eyesee

    Bleepin Teck Shop

  • BC Advisor
  • PipPipPipPipPipPip
  • 3,447 posts
  • Gender:Male
  • Location:In the middle of Kansas

Posted 31 August 2011 - 11:40 AM

I noticed a considerable drop off in fake AV's that I am seeing.
Probably the calm before the storm!
In the beginning there was the command line.

#8 herg62123

herg62123

    Senior Member

  • Malware Study Hall Sophomore
  • PipPipPipPip
  • 545 posts
  • Gender:Male
  • Location:Montgomery, AL

Posted 01 September 2011 - 04:10 AM

Now we need a way to zero out zeroaccess and other rootkits. If that happened we are doing good.

:whistle:
Posted Image

#9 Minh Triet Pham Tran

Minh Triet Pham Tran

    Member

  • Members
  • PipPip
  • 110 posts
  • Gender:Male

Posted 07 January 2012 - 06:09 PM

The fake-antivirus business was a big money-maker in the first half of this year. Then, at the end of June, fake-AV products practically disappeared from the web. Was it technology, or does traditional law enforcement deserve the credit?


I don't believe this. There are many new fake-AV distribution websites which they don't know.
If you think technology can solve your security problems, then you don't understand the problems and you don't understand the technology. — Bruce Schneier

#10 the_patriot11

the_patriot11

    High Tech Redneck

  • BC Advisor
  • PipPipPipPipPipPip
  • 5,901 posts
  • Gender:Male
  • Location:Wyoming USA

Posted 07 January 2012 - 11:47 PM

They didnt say it was wholly erased, but rather no longer the big deal it once was. When it started, a lot of people had problems with them, and they made a fortune, but now, yes there may still be a few out there here and there, theyre no longer making money like they once were and are few and far between-you chances of getting one are rare. Its like people who still use windows 3.1 on their primary OS. The operating system, is in effect dead, kaput gone. Yet, there are still people who use it (and refuse to upgrade) though their hard to find. And the article points out, theres a good chance theyll come back.

Edited by the_patriot11, 07 January 2012 - 11:48 PM.

Posted Image
Primary system: Motherboard: ASUS M4A89GTD PRO/USB3, Processor: AMD Phenom II x4 945, Memory: 16 gigs of Patriot G2 DDR3 1600, Video: ASUS ATI 4890 and a Saphire 4890 in Crossfire, Storage: 1 WD 500 gig HD, 1 Hitachi 500 gig HD, and Power supply: Coolermaster 750 watt, OS: Windows 7 ultimate 64 bit.
Media Center: Motherboard: Gigabyte mp61p-S3, Processor: AMD Athlon 64 x2 6000+, Memory: 6 gigs Patriot DDR2 800, Video: Gigabyte 4550, Storage: 500 gig Hitachi, PSU: OCZ Fatal1ty 550 watt modular PSU, OS: Windows 7 Ultimate.
If I don't reply within 24 hours of your reply, feel free to send me a pm.

#11 Nicholas R.

Nicholas R.

    New Member

  • Members
  • Pip
  • 6 posts

Posted 16 January 2012 - 09:26 PM

Thats nice to hear that they're slowly disappearing off the web. They're so hard to get rid of >.<


Hopefully they don't come back with a vengeance...

#12 Grinler

Grinler

    Bleep Bleep!

  • Admin
  • PipPipPipPipPipPip
  • 38,510 posts
  • Gender:Male
  • Location:USA

Posted 18 January 2012 - 12:07 PM

Actually rogues are starting to come back with a vengeance. As I had said in the past, they were only gone until they could find another method of clearing the credit card payments. Looks like they have figured out a way to do this.

Lawrence Abrams
Circle BleepingComputer on Google+!
Become a BleepingComputer fan: Facebook
Follow us on Twitter!
How to detect vulnerable programs using Secunia Personal Software Inspector <- Everyone should do this!
Simple and easy ways to keep your computer safe and secure on the Internet <- Everyone must read this!

#13 MalwareWarrior

MalwareWarrior

    Member

  • Members
  • PipPip
  • 79 posts
  • Gender:Not Telling

Posted 24 January 2012 - 09:25 PM

They aren't as common as they where a while ago, but they most certainly are still a large threat. Speaking of fake-antiviruses, ever heard of SpyVampire? :lol:
Printer spooler, printer spooler, does whatever a spooler can.
Prints a page, any size, has the life span of a fly.
Look out, here comes the printer spooler.

#14 avinashpathak

avinashpathak

    New Member

  • Members
  • Pip
  • 7 posts

Posted 31 January 2012 - 07:37 AM

Thanks,
Thanks for sharing this article. As we are in IT sector we need to updates with this information .
So thanks

#15 bailey2007player

bailey2007player

    Member

  • Members
  • PipPip
  • 58 posts
  • Gender:Male
  • Location:Adelaide

Posted 12 June 2012 - 07:14 AM

Now we need a way to zero out zeroaccess and other rootkits. If that happened we are doing good.

:whistle:


I think we have, for ALL rootkits, it's called 64 bit
I Have a Mac in one hand and PC in the another hand!
Back to News


0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users


  1. BleepingComputer.com
  2. → General Topics
  3. → News
  4. Privacy Policy
  5. Rules ·