Using a fake portrayal of Microsoft’s Windows Security Center, users are asked to click on a link to download a program for $10.


Using a fake Microsoft’s Windows Security Center a bogus site displays such factual information as the user’s IP address, the browser being used, operating system, and country of origin.

Along with that the page claims that an attacker “has gained access to your computer and is collecting the information about the sites you’ve visited and the files contained in the folder My Documents”. A popup also alleges that the PC has been infected with a rogue .dll, a piece of spyware dubbed “W32.Sinnaka.a”, that’s collecting private data.

Then the users are asked to click on one of the four links to purported anti-spyware tools with names like Spy Trooper, PS Guard, World AntiSpy, and Raze Spyware. Users who click on a link to download one of these programs is told to register the program for a small fee: $10.

This phishing attack is based on a Web site. According to a security expert this shows that phishers are increasingly abandoning the traditional email ploy of telling consumers their bank accounts are at risk.

Sharing is caring