This is my personal view and comments on the issues and events that I feel a need to talk about or express my view. You don't have to agree, but lets carry on a adult, discussion and maybe you will see it the right way, mine. ;)

This is interesting, having your own computer held hostage, remotely.

A recent malicious campaign spotted by GFI researchers uses a variation of spoofed reported attack pages, which spurs users to install an "update" for Internet Explorer. The offered update is fake and the downloaded code actually locks the user out of his/her PC and plasters a warning across the the screen telling him/her that 19 "unlicensed software, movies and music" files have been found on the computer, along with "materials with pornographic content (including homosexual content pornography)." While threatening to send the "evidence" to the police, the scammers offer the user a way out by calling a phone number and paying a ransom fee.

http://www.net-security.org/malware_news.php?id=1667

 


Comments
on Mar 15, 2011

the scammers offer the user a way out by calling a phone number and paying a ransom fee.

What would be good is to be able to trace the location of that phone, then send somebody down there to rip their bloody arms off.

on Mar 15, 2011

A recent malicious campaign spotted by GFI researchers uses a variation of spoofed reported attack pages, which spurs users to install an "update" for Internet Explorer.

I have repeatedly cautioned folks not to accept "updates" from non proprietary sites: MS does not send update notifications by email. Ever. It has it's own updater which, if your OS is working correctly, does the work re update notification.

On another note (though in the same spirit as the OP), http://www.infopackets.com/news/security/2011/20110314_beware_fake_google_security_tool.htm

A malware Android app masquerading as the Google Security app which actually installs malware on your Android phone. Goes by additional names as well.

on Mar 15, 2011

Arse bungs!

There is an easy way out of it since you still have physical access to the box.  But I wonder about the phone number since it is a crime, and as Starkers points out, it can be traced.  Probably a Cayman Island number - but still after a day, I would expect the number to be disconnected just due to pressure from authorities.

on Mar 15, 2011

DrJBHL
MS does not send update notifications by email. Ever.

No?

I wonder what that service I signed up for, years ago on Windows Update, was then - and to this day still dumps an email in my inbox whenever there are any Windows updates ready.

on Mar 15, 2011

No?

I wonder what that service I signed up for, years ago on Windows Update, was then - and to this day still dumps an email in my inbox whenever there are any Windows updates ready.

I agree with Snowy, Microsoft has an update notification service.

You would have to sign up for it though.

on Mar 15, 2011

I agree with Snowy, Microsoft has an update notification service.

You would have to sign up for it though.

Well...since it's so easy to scam people these days with fake emails...the smartest thing to do is if you happen to get an email notification (I've gotten notices like this) is to just delete it and go to the actual site to check on your own and get the update that way. I never trust anything I get via email.

on Mar 15, 2011

Speaking of emails. Mine has been loaded recently, in the spam box, with an assorted collection of emails all with attachments on them. I never open anything in the spam box. All those are automatically deleted without so much as a second thought. Anything I don't recognize and even some I do I delete. Not taking any chances.

on Mar 15, 2011

Speaking of emails. Mine has been loaded recently, in the spam box, with an assorted collection of emails all with attachments on them.

I don't just get then in my spam box.... some come through to my inbox because they are supposedly from contacts/people I know.

I keep getting them from my 'son-in-law'... just an email with a dodgey link on it, but it's not him because he hasn't had access to the internet, let alone his hotmail account.  Even if he had access to the net and his account, I'd still know they weren't from him because he always addresses me in a certain way and always includes text with regard to what it's about.

Obviously somebody has hacked into his account and is using it for nefarious purposes, so they get the obligatory delete button treatment

on Mar 16, 2011

Snowman

Quoting DrJBHL, reply 2MS does not send update notifications by email. Ever.
No?

I wonder what that service I signed up for, years ago on Windows Update, was then - and to this day still dumps an email in my inbox whenever there are any Windows updates ready.

True - I get it as well - but then it includes no attachments and no links.  It is a simple listing of the critical and important issues.