Scareware Information

[Falstad007]

A user at our office stumbled across this page today after clicking what was ostensibly a news article on MSN.

 

 

Does anyone have any information on scareware like this (i.e. how people set these up, how the URL can have that output, etc).

 

Not finding too many in-depth articles concerning this.

[Bananasplit_00]

i think most people realize its fake, they sneek in via auto advertising and stuff usiually and direct through a heap of IPs before you reach what you are looking at

[Eclypseon]

9 hours ago, Falstad007 said:

how people set these up, how the URL can have that output, etc

To answer these questions specifically... (and under the assumption of understanding and not duplication of the scheme)...

 

The setup involves getting a "<some random number that looks like hexadecimal>.bid" URL (available on the cheap all over)

Then throwing a red background webpage on it with scary text and a little javascript popup for the visitor.

 

The more  cleverly nefarious stuff might include some nasty javascript in the background doing some penetration/malware delivery attacks etc.

 

Then theres the undoubted hidden text embedded in the page/site filled with keywords and SEO spoofers to make the page appear as an innocuous news article link elsewhere on the web.

 

And thats how that sort of malarky is done. And no one... not anybody... appreciates it. Hopefully your coworker's machine is safely secured.