Let me tell you a story:
There you are, checking the latest Fantasy Football stats
and suddenly a pop-up appears to announce that the “Doom32” Trojan has been
discovered, among other things, on your machine and that if you just follow the
link provided, you can scan your system for free and learn how you can clean
out the malware once and for all. You stare a moment at the Norton icon at the
bottom of your screen and wonder why this expensive suite of defensive software
couldn’t stop something called “Doom32” and then click on the link.
The link takes you to a website that seems a typical product
sale site. They show the box of the anti-malware software, features and
comparisons with products like McAfee and Norton, and after scanning through
all that you see the free scan button. You hit it and the scan begins. While it
progresses, you see a slideshow that details how wonderful the featured
anti-virus product is and all the things it can take care of. The scan ends and
you are presented with a list of Trojans and worms, viruses, of all
description, adware, spyware—anything that looks believable. Why didn’t Norton
stop all these? Good thing the featured product can get rid of them and for
only $49.95 with a year of free updates. Norton is beginning to look like
over-priced garbage. After all, it was part of the bloatware that came
preinstalled on your computer and you would not have chosen it yourself and
here is an opportunity to trade up. You fish out your wallet and hit the Buy Now button.
The software downloads, you run it, wait, watching the
snazzy progress bars and file lists do their thing and after a while, the thing
pings at you and lets you know that it has identified all the malware. You
click on the Clean button and after a minute the window empties of malware and
your system is announced to be clean. You heave a deep sigh of relief and go
back to the Fantasy Football, oblivious to what you have just done. As for
that, there is only one thing I can say:
Boo! You are a victim of scareware.
The FTC is On to
Scareware
According to the Federal Trade Commission (FTC), scammers can
now create realistic, but phony “security alerts.” The “alerts” look as if they
come from your computer, exploiting your fear and loathing of online security
threats; but they really come through your browser, courtesy of a
cyber-criminal somewhere.
Identifying Scareware
According to the FTC, the scammers go to great lengths to
make their product and service look legitimate. There are also a number of variations
on the basic scam to keep victims guessing. Still, there are telltale signs you
should look out for:
·
Ads promise to “delete viruses or spyware,”
“protect privacy,” “improve computer function,” “remove harmful files,” or
“clean your registry”
·
Sudden “alerts” about “malicious software” or
“illegal pornography on your computer”
·
Invitation to download free software for a
security scan or to improve your system
·
Pop-ups that claim your security software is
out-of-date and your computer is in immediate danger
·
An unfamiliar website claims to have performed a
security scan and prompts you to download new software
The Dangers of
Scareware
Aside from the obvious, getting you to buy something you do
not need—Norton did not detect Doom32 because the virus was never there to
begin with—you usually have to visit a website you do not know and download
software from that site. That fact exposes you to attack from the site itself
as well as from anything you download. You could be opening yourself up to
malware of all sorts that range from benign adware to highly destructive
viruses. You are exposing yourself to identity theft and you may be turning
your computer into a spam-bot, that will connect to the Internet and send spam
and malware to other unsuspecting victims. Moreover, since you probably had to
remove your existing protection, you may well be wide open to attack every time
you log on.
Now that is scary!
What to Do if You Get
a Scareware Offer
The FTC suggests this course of action at the first sign of
scareware trouble:
If you’re faced with any of the warning signs of a scareware
scam or suspect a problem, shut down your browser. Don’t click “No” or
“Cancel,” or even the “x” at the top right corner of the screen. Some scareware
is designed so that any of those buttons can activate the program. If you use
Windows, press Ctrl + Alt + Delete to open your Task Manager, and click “End
Task.” If you use a Mac, press Command + Option + Q + Esc to “Force Quit.”
The Bottom Line
Spam is spam for a reason. Remember that, especially if you
get an offer. If you must look into the offer, then check out the company and
the program by entering the names in a search engine such as Google. I would
suggest you also hit Yahoo and MSN search as well, since you may get different
results. What comes up in the search can easily help you determine if the company
and their product are legitimate or not.
On the other hand, there is always this basic rule: If I did not request it, I do not want it.
Follow that rule and most of these problems—most, not all—will evaporate.
Regardless, be careful out there.
Report possible fraud online at ftc.gov
or by phone at 1-877-FTC-HELP. Details about the purchase — including what
website you were visiting when you were redirected — are helpful to
investigators.
Visit www.OnGuardOnline.gov
to learn more about protecting your computer from bugs, viruses and scammers.
If you enjoyed this post, please consider leaving a comment or subscribing to our free newsletter to receive future articles and information delivered directly to your email inbox.