For some time, cyber-criminals have been writing and distributing scareware as part of their arsenal in the battle to take control of our computers.
Put simply, scareware programs are designed to frighten people into running malicious software by popping up when the user is online and declaring that viruses/Trojans have been detected and that all the user has to do is run the program they provide to clear up the ‘infected’ system.
Anti-virus provider Symantec have recently released a report which indicates that this practice isn’t going away.
I am always a bit skeptical about how much criminals really earn carrying out virus writing scams.
I suspect the majority could be described as ‘failing businesses’, with a smaller number actually making some money and then selling their technology to those new to the scam.
As users, this doesn’t help us as.
There is still a lot of scareware out there, and many people still falling for it. (Forty-three million in the last year according to Symantec).
So, why are so many of us still falling for this con trick if it’s been around for so long?
Why is it that people will just download from a site they have never heard of, a site which doesn’t appear to specialize in anti-malware, rather than use reputable anti-malware solutions?
One theory is that users are relaxed, at home and feeling secure. Hence their defenses are down, and they will believe anything.
Lack of awareness could also be a issue.
This is difficult for me to believe as all I seem to read about are scams and malware, but then again that is what I do so perhaps it is not surprising.
Another thought is that the message is almost too strong.
That people are aware of malware, and know that they need protection, so when they get told that they are infected they believe it, and want a quick, easy solution which the pop-up box is presenting to them.
Perhaps the initial panic that the user experiences when informed about the ‘infection’, kicks in and drives them to download the first ‘remedy’ available.
Maybe they’re just clicking anything to get rid of the error message.
Logically, users that have a fully updated security suite installed on their system shouldn’t experience the same kind of panic and feeling of vulnerability that would prompt them to click this message.
However, what about those users who don’t have a security solution installed?
For home users, security suites can be purchased for as little as £20 these days. That’s not to mention the legitimate free anti-virus providers that home users can install.
The fact is, people are clicking on these messages and getting infected, which is a problem for all of us.
Perhaps, rather than individual campaigns targeted at certain issues of the moment, the industry as a whole needs to co-operate on a national awareness campaign, highlighting the risks and providing guidelines to the user on how to mitigate them.
* * *
Stay Informed With ISR News Feeds and Email Alerts Here:
Simon Heron has over 19 years experience in the IT industry, including nine years experience in Internet security. During this time he has developed and designed technologies ranging from firewalls, anti-virus, LANs and WANs. Simon has an MSc (attained with Distinction) in Microprocessor Technology and Applications, and a BSc (Hons) in Naval Architecture and Shipbuilding and is a CISSP (Certified Information Systems Security Professional). Prior to Net Caboose, Simon co-founded Network Box Corporation (UK) Ltd and was Managing Director, finally merging this franchise with the parent company in 2006. Before Network Box, Simon joined the British Antarctic Survey (B.A.S.) as science project leader, and spent two Antarctic winters at the research station Halley in the Antarctic, developing and enhancing graphical technologies in the harshest of conditions. Simon also has a company called Net Caboose which deals with Identity and Access Management and is also development house.
Network Box Limited (NBL) is an international managed security services company, specialising in unified threat management (UTM). It continuously defends the networks of its customers using PUSH technology to instantaneously update protection, from 12 Security Operations Centres spread around the globe. NBL’s customers in Asia, Australia, North America and Europe include companies such as BMW, Nintendo and Toyota, as well as banks, utilities companies and government organisations.
The Publisher gives permission to link, post, distribute, or reference this article for any lawful purpose, provided attribution is made to the author and to Information-Security-Resources.com
October 27th, 2009 at 7:00 am
“So, why are so many of us still falling for this con trick if it’s been around for so long?”
It comes down to lack of education. Not everyone utilises computers in daily/ working life or has the freedom to peruse sites which re-enforce the dangers lurking on the net.
Many people access the internet after a tiring day at work or school and this situation likely encourages users to accept scareware payloads especially if it means they can get back to their website.