Rouge Antivirus imitates BitDefender

BitDefender has recently found a new rogue antivirus software that was tricking users by installing it and posing as a BitDefender PC security product. Moreover the name wasd ByteDefender quite similar to BitDefender, this malicious software acts like a fully-fledged rogue antivirus with a twist.



Unlike other rogue antivirus applications, the ByteDefender sibling does not rely on the classic drive-by method used by most products of its kind, but rather allied on the popularity of the BitDefender products and their distinct visual identity to lure users into voluntarily downloading it. The website distributing it is located at hxxp://www.bytedefender.in (URL specifically invalidated to avoid accidental infection) and abusively built using the BitDefender layout. The domain name has been registered in Ukraine. Even the boxshots have been crafted in such a manner to trick the user into thinking that they are installing the genuine security product.

The infection scenario is simple, yet efficient: the user searching for a BitDefender software type genuine address and he/she might gets redirected to the malicious software’s webpage. As they have web page similar to webpage structure of original website, the user might download and install this rogue antivirus.

Once installed in the copmuter, this piece of scareware would start showing fake infection alerts in an attempt to pursue the user to purchase the “full version” and get rid of the mentioned fake threats.

Interesting enough, the payment processor for the ByteDefender Rogue antivirus is the trustworthy company Plimus, who has suspended sales on grounds of user abuse.



“Cyber-criminals have no boundaries when it comes to distributing and marketing their rogue computer security software. Sensational events, Trojanized applications or websites and watchfully forged –moreover they are useless – ‘security products’ are only a few of the multitude of methods to capitalize on unwary users”, said Catalin Cosoi, senior Researcher at BitDefender Company.

Read More

How to avoid Malware Attack?

Symantec a leading Antivirus and Antispyware company reported that there are more than 12000 malware detected every day. What actually malware means? Malware is a short name for malicious software they are designed to infiltrate your PC without your consent.

The best-known types of malware, viruses and worms, are known for the manner in which they spread, rather than any other particular behavior. The term computer virus is used for a program that has infected some executable software and that causes that software, when run, to spread the virus to other executable software. Viruses may also contain a payload that performs other actions, often malicious. A worm, on the other hand, is a program that actively transmits itself over a network to infect other computers. It too may carry a payload.

How do they infringe even though we have a firewall? The question is still unanswered. Is there any solution for this fatal ruthless infringement? Some would say that keep your anti-virus software updated and do a system run now and then, scan the external hardrive before using it and keep a back up of all the important information you have in your system. The saddest part is that, there are some malware that could even affect the anti-virus application.
One way to keep a check on malware is by changing the extension of the executable file of the antivirus software. But we have to make sure that the program runs with no problems what so ever. Expert technocrats suggest that one can change the extension of the executable to .com from .exe. One can also check the “hide the known extension file types” in the folder option under tools in Microsoft Windows Operating System. Although this is not the only solution to all the malware attacks one can try to keep a check on such nasty malwares.

Read More