Virus hoaxers hijack Microsoft site
A new scareware package tries to sell bogus antivirus software to its victims using an apparent endorsement of the software by Microsoft.
A variant of the infection that urges users to buy DefenceLab antivirus software now also directs them to a Microsoft support page where a display describes a new threat and recommends using DefenceLab antivirus to clear it and protect against it.
It's a real Microsoft support site, but it's the malware already running on users' infected computers that injects the threat warning and the endorsement of the antivirus software, according to a blog by Matt Kelchner, a researcher at Sunbelt Software.