Is It Really a Conficker Removal Tool or FakeScan A?
Do you think you're smart enough to not fall into cyber criminals' traps? I bet there have been times when you clicked, or were about to click, on an unknown links or attachments because hackers are becoming more and more creative and professional in their malicious schemes. Recently security researchers have been increasingly warning potential victims of malware campaigns that spread out as fake security updates or antivirus solutions. This time I'd like to draw your attention to FakeScan A, it is being dropped by a fake Conficker removal tool.
The attack starts with a persuasive email message being sent to a potential victim's inbox. This spam comes with the subject line "Important Windows Xp/Vista Security Update!" and is purportedly being sent from Microsoft Corporation. Rossano Ferraris, research engineer at CA Internet Security Business Unit, notes that "the email comes from a certain Microsoft[dot]ssl[dot]com whose IP address is 38.100.66.185. This IP address originates from a server which is located in Texas and is not a Microsoft server."
