Zscaler Data Protection Recognized as a 2023 Product of the Year by CRN

Zscaler Blog

Get the latest Zscaler blog updates in your inbox

Security Research

Fake AV: New Look & Feel

July 27, 2010 - 1 min read

I recently stumbled upon a new type of fake AV page. This one looks like the store front of an anti-virus vendor.

New fake AV look & feel

The page is animated and displays a fake AV scanner in action. At the end of the animation, the user is warned that several viruses were found on the user computer and the page attempts do download a fake anti-virus binary named: antivirus.exe. Strangely, the "Download for free" image is not clickable.

Popup is followed by an attempt to download fake antivirus

The page is hosted on scanerzone.cz.cc. At the time it was found, neither Google Safe Browsing (Firefox, Safari, Chrome) or Internet Explorer SmartScreen filter block the page. The malicious executable is detected by 12 antivirus vendors out of 42.I was lead to this page through a spam SEO link in a Google search. However, unlike most other fake AV pages, direct access to the page displays the fake antivirus page. A similar page can be found on bestmalwarescaner.cz.cc, the domain is currently blocked by Google Safe Browsing.

 -- Julien

form submtited
Thank you for reading

Was this post useful?

Explore more Zscaler blogs

A cyber criminal shopping for malware
Agniane Stealer: Dark Web’s Crypto Threat
Read Post
Business people walking through a city
The Impact of the SEC’s New Cybersecurity Policies
Read Post
Digital cloud illuminated in blue
Security Advisory: Remote Code Execution Vulnerability (CVE-2023-3519)
Read Post
The TOITOIN Trojan: Analyzing a New Multi-Stage Attack Targeting LATAM Region
Read Post
01 / 02
dots pattern

Get the latest Zscaler blog updates in your inbox

By submitting the form, you are agreeing to our privacy policy.