Spyware Techie

Recent security research findings have revealed that scammers are abusing Google Trends to poison Google search results with links that spread malware or fake security applications.

If you are at all familiar with Google Trends then you might be in the internet marketing field or a Google keyword search aficionado. Google Trends is a tool that highlights the most popular searches of the past hour or over a specified period of time. The tool can be used by many to promote a certain keyword due to its rising or historic popularity all displayed in charts and statistical form via the Google Trends web page.

Scammers are now using the Google Trends tool to promote their scamware or sometimes vicious fake security programs. They seek out the popular search keywords or terms and use them to integrate into their own malicious sites or product web pages. Google picks up on popular keywords and news items almost like white on rice in some cases. The hackers and cyberthieves know this and have done their homework so they are able to use any popular keywords found through Google Trends to tag onto their own products and sites.

Do you know what Spyware Fighter is?

DESCRIPTION

Spyware Fighter or SpywareFighter, is program that may be installed on your computer automatically that attempts to scan for spyware and other malware parasites. These are the typical actions that other rogue anti-spyware programs perform which is why Spyware Fighter should not be trusted because it is yet another fake anti-spyware program.

Spyware Fighter is offered at $40 to $80 and for that fee it claims you are able to detect and remove threats from your system but that is a complete lie. You should not trust Spyware Fighter for detection or removal of anything. Spyware Fighter is known to also be advertised and sold on the www.spyware-fighter.com website. Stay away from this site.

Fake Delta Airline ticket confirmation messages were found to be currently circulating where they contain a Trojan infection identified as W32/Trojan2.FXRO.

One of our readers gave us this tip reported on MXLab’s blog (blog.mxlab.be).

During the past holiday season there were reports of email messages that spoofed airline companies spreading malware and the trend has continued. The current malware being spread comes attached as a zip file named delta_RQ763.exe to an email with the subject line “Confirmation of airline ticket purchase at www.delta.com.” The spammers go even further to make this message look legitimate by spoofing the email address as support@delta.com. To a normal computer user that message will appear to have legitimately come from Delta Airlines.

Do you know what Virus Remover 2009 is?

DESCRIPTION

Virus Remover 2009 or VirusRemover 2009, is a fake anti-spyware program which like other fake programs facilitate many malicious actions when installed on your computer. Virus Remover 2009 is basically a newer version of Virus Remover 2008 which is another rogue anti-spyware program that users some of the same tactics in an attempt to extort money from you.

Virus Remover 2009 and like programs uses popups and fake system scans to scare computer users into purchasing a full version of Virus Remover 2009. Virus Remover 2009 makes you think that after spending your money you will fix or remove the threat that Virus Remover 2009 found. Virus Remover 2009 may come from the same sources as VirusRemover 2008 which may be a Trojan such as Zlob or a website that advertises the Virus Remover 2009 or Virus Remover 2008 programs.

Do you know what W32/Trojan2.FXRO is?

DESCRIPTION

W32/Trojan2.FXRO Trojan is a vicious type of Trojan infection that was recently discovered the be included within a Zip file of a fake Delta Airlines Ticket Conformation email. W32/Trojan2.FXRO has been discovered by a few security firms. This Trojan is known to connect to malicious sources over the internet where it is a possibility of your information being compromised or data stolen.

Heartland Payment Systems was thought to be the company breached but researchers speculate another payment processing company being compromised.

There was already a serious credit card data breach within Heartland Payment Systems just recently but this new breach may not be associated with Heartland and the culprit may not be known as of yet. It seems to be an epidemic of cyberthieves hacking into or compromising systems at large companies where they are able to steal credit or debit card information. Ultimately it is all for monetary gain where cyberthieves make off with hundreds or thousands of credit card numbers so that they can turn their own economy into basically lottery winnings.

We just reported of an incident when thousands of Wyndham credit card numbers were stolen by hackers which may prove that this is a mounting concern for corporations who harbor this type of data. The Wyndham credit card number theft situation may have been a bit more isolated when compared to the most recent credit card breach where the victim of the breach appears to be a company that processes online transactions. Many consumers have been contacted by MasterCard or Visa with a statement explaining that their check card or credit card was compromised.

Do you know what Advanced Spyware Detector is?

DESCRIPTION

Advanced Spyware Detector is supposed to be a program that will detect and remove spyware but it does not do any of this. Advanced Spyware Detector is another fake anti-spyware program. Advanced Spyware Detector seems as if it was designed to steal money from you by persuading you to purchase a full version or license of Advanced Spyware Detector.

It is safe to say that Advanced Spyware Detector is a waste of money and a program that does not belong on your computer. Advanced Spyware Detector may be heavily advertised through a malicious website which is where AdvancedSpywareDetector may come from in addition to be being installed by a Trojan infection automatically.

Do you know what Conficker B++ is?

DESCRIPTION

Conficker B++ is the newest variant of Conficker Worm (also known as: Downadup or Kido). Conficker is known as a dangerous infection that has affected millions of computers around the world which now as a newer variant Conficker B++ that may have new methods for avoiding previous actions taken to limit the spread of the original Conficker infection.

Conficker, also known as downadup or Kido, has infected 10.5 million computers around the world with all of its variants. The Conficker B++ infection may post a much more serious threat as it was only discovered in mid February 2009 by SRI International to have a different method for avoiding rendezvous points that the previous Conficker infection was programmed to do.

Do you know what ExtSecurityCenter is?

DESCRIPTION

ExtSecurityCenter or Ext Security Center, is a fake anti-spyware program that may ultimately crash your system. ExtSecurityCenter performs many fake functions such as scanning your computer for malware but it does not have the capability to find or removal legitimate infections.

ExtSecurityCenter may be very annoying in the way that it prompts you through popups that say you are infected with some type of malware but it reality the message is fake. ExtSecurityCenter may come from malicious websites over the internet and could have the ability to download other malware files or malicious programs onto your computer without asking for permission.

Do you know what Malware Removal BOT is?

DESCRIPTION

Malware Removal BOT is a fake anti-spyware program that performs many of the classic malicious actions of other well-known rogue anti-spyware programs. Malware Removal BOT claims to be able to scan for, remove and prevent malware but in actuality it does not do any of these functions.

Malware Removal BOT may appear to scan your computer finding multiple malware parasites but this scan was found to be done only to persuade computer users to purchase the full version of Malware Removal BOT. Malware Removal BOT may come from a Trojan infection or directly from the www.malwareremovalbot.com website.