Malware makers target Windows 8 - Fake AV and phising

vbimport

#1

Malware makers target Windows 8 - Fake AV and phising.

[newsimage]http://static.rankone.nl/images_posts/2012/11/7SHImC.jpg[/newsimage]While Windows 8 isn't out for a week yet, malware makers are trying to ride the wave of publicity Microsoft's latest OS gets. Anti-virus company TrendMicro has posted two security threats on their blog that specifically target Windows 8.


Read the full article here: [http://www.myce.com/news/malware-makers-target-windows-8-fake-av-and-phising-64601/](http://www.myce.com/news/malware-makers-target-windows-8-fake-av-and-phising-64601/)


Please note that the reactions from the complete site will be synched below.

#2

Disguessing malware as a security system for a new OS that few are going to be familiar with… sounds like a good strategy. Too bad the people behind it deserve at least one lifetime of horrible things to happen to them.

Fortunately, Windows 8 comes with a complete security solution built-in. Also, many manufactures and retailers like to bundle a trial version of some security suite, like McAfee, or Norton.


#3

Disguising these hijacker ‘viruses’ have been a mainstay for many years now by tricking a user into unknowingly giving away User Rights.

Like Mina inviting in Count Dracula - once she lets him in, it’s all over.

Many AVs use their own proper names in the Active Window Title Bar. So, if I’ve got AVG Anti-Virus installed, I’ll see virus-alerts with “AVG AntiVirus” printed in the active-windows title bar. If I see something else, then I know it’s a fake alert.

Microsoft’s Windows Defender and Security Essentials didn’t use those exact spellings on their true alerts. Not in the past. Maybe their Win8 programmers discovered “precision” and “correctness” to be useful.

Or maybe not. We’ll see.

The Bleeping Computer has a huge array of hijacker names that have been used, and almost all of them are worthy of tricking more than a few users in their web.

I’m not sure how an OS can defeat these hijackers when the nonchalant user is tricked into ‘letting them in’ but it seems like an OS should be able to detect changes to its core components and offer some solution. Unfortunately, that will always result in some UserID agreeing to the changes - and if that’s the HiJacker User, well, then…

“Come right in.”

(I have laughed at the several articles in the past month talking about Win8’s “security” and “invulnerabiliteis”, and especially, “the lack of virus attacks.” Yeah. Riiiight. Before Day One. Uh huh. Next summer, we’ll see “Win8 has more Virus Attacks than Win7” articles. Meanwhile, Win98-SE will be among the least-attacked Win OS’s. du-uh.


#4

Why I’m not surprise ?! Typically Microsoft annoucement.
You have a complementary article on Teckweek :