AfterDawn: Tech news

FBI targets 'scareware' malware peddlers

Written by James Delahunty @ 24 Jun 2011 12:44 User comments (5)

FBI targets 'scareware' malware peddlers U.S. Feds work with international law enforcement agencies to disrupt two FAKEAV peddlers.
Two Latvian individuals have been indicted, and more than 40 computers, servers and back accounts have been seized as part of Operation Trident Tribunal, which targets peddlers of fake anti-virus scams. It is estimated that the gangs involved caused more than $74 million in total losses to more than one million computer users.

Scareware works by alerting users to fake threats allegedly residing on their computers with terrifying scan results, then offers to clean up the non-existent malware if the user will pay a fee for a full version of the software, using a credit card. There are many ways scareware can show up on a victims' PC, such as being tricked into installing it from a fake alert on a webpage, or it may be downloaded and executed by an existing malware on the computer.

The first of the international criminal groups disrupted by Operation Trident Tribunal infected hundreds of thousands of computers with scareware and sold more than $72 million of the fake antivirus product over a period of three years. An estimated 960,000 users were victimized by the scheme, some paying up to $129. Latvian authorties seized at least five bank accounts that were alleged to have been used to funnel profits to the scam's leadership.



A second scam targeted by law enforcement relied on malicious advertisements (malvertisements) to deliver the scamware. An indictment unsealed in U.S. District Court in Minneapolis charges the two operators of this scareware scheme with two counts of wire fraud, one count of conspiracy to commit wire fraud and computer fraud. The two (Peteris Sahurovs, 22, and Marina Maslobojeva, 23) were arrested by Latvian authorities in Rezekne.

They had created a fake advertising agency and claimed to represent a hotel chain. After convincing the Minneapolis Star Tribune's news website, startribune.com, to carry the advertisements for the fake hotel chains, they changed the advertisements to malicious variants, leading to infection of many readers' computers.

The scam allegedly led to at least $2 million in losses. If convicted, the defendants face penalties of up to 20 years in prison and fines of up to $250,000 on the wire fraud and conspiracy charges, and up to 10 years in prison and fines of up to $250,000 on the computer fraud charge.

"Today's operation targets cybercrime rings that stole millions of dollars from unsuspecting computer users," said Assistant Attorney General Lanny A. Breuer of the Criminal Division.

"These criminal enterprises infected the computers of innocent victims with malicious scareware, and then duped them into purchasing fake anti-virus software. Cyber crime is profitable, and can prey upon American consumers and companies from nearly any corner of the globe. We will continue to be aggressive and innovative in our approach to combating this international threat. At the same time, computer users must be vigilant in educating themselves about cyber security and taking the appropriate steps to prevent dangerous and costly intrusions."

Tags: malware
Previous Next  

5 user comments

124.6.2011 13:11

Yeah these losers need to pay hard! I got one so bad one time in the end the only thing I could do to get rid of the popups or do anything on the net was to wipe the system. Of course I was savy enough I wasn't paying the theives anything.

Wonder what happens if they do pay? Do they actually clear the malware or just take all the money they can steal and run?

224.6.2011 13:13

I still think a Wac-a-mole contest with the exposed genitalia of these idiots under the hot Texas sun would do these guys a world of good. Then we set them on a fire ant hill for 20 minutes after basting their nuts with honey for good measure. All the while waiving images of their little scam in their faces. Kind of like they did Malcolm McDowell in "A Clockwork Orange".

Sure, some of you folks are going to say it's cruel & unusual punishment, but who the hell said it was for "their" benefit or reform?

This message has been edited since its posting. Latest edit was made on 24 Jun 2011 @ 1:14

324.6.2011 15:42

So Authorities are only just starting to get these people now,must be a slow year for them

424.6.2011 18:45

Trust me, there's no need to wipe your system out if you get infected by this crap. Just download and run the latest combofix and it will handle it.

524.6.2011 20:02
smiler123
Inactive

get thee behind me satan

Comments have been disabled for this article.

Latest news

VLC hits milestone: over 5 billion downloads VLC hits milestone: over 5 billion downloads (16 Mar 2024 4:31)
VLC Media Player, the versatile video-software powerhouse, has achieved a remarkable feat: it has been downloaded over 5 billion times.
1 user comment
Sideloading apps to Android gets easier, as Google settles its lawsuit Sideloading apps to Android gets easier, as Google settles its lawsuit (19 Dec 2023 11:09)
Google settled its lawsuit in September 2023, and one of the settlement terms was that the way applications are installed on Android from outside the Google Play Store must become simpler. In the future, installing APK files will be easier.
8 user comments
Roomba Combo j7+ review - Clever trick allows robot vacuum finally to tackle home with rugs and carpets Roomba Combo j7+ review - Clever trick allows robot vacuum finally to tackle home with rugs and carpets (06 Jun 2023 9:19)
Roomba Combo j7+ is the very first Roomba model to combine robot vacuum with mopping features. And Roomba Combo j7+ does all that with a very clever trick, which tackles the problem with mopping and carpets. But is it any good? We found out.
Neato, the robot vacuum company, ends its operations Neato, the robot vacuum company, ends its operations (02 May 2023 3:38)
Neato Robotics has ceased its operations. American robot vacuum pioneer founded in 2005 has finally called it quits and company will cease its operations and sales. Only a skeleton crew will remain who will keep the servers running until 2028.
5 user comments
How to Send Messages to Yourself on WhatsApp How to Send Messages to Yourself on WhatsApp (20 Mar 2023 1:25)
The world's most popular messaging platform, Meta-owned WhatsApp has enabled sending messages to yourself. While at first, this might seem like an odd feature, it can be very useful in a lot of situations. ....
18 user comments

News archive