Menu
Ransomware and scammy tech support sites team up for a vicious one-two punch

Ransomware and scammy tech support sites team up for a vicious one-two punch

One holds your files hostage, the other overcharges to fix nonexistent computer problems

Symantec has seen a curious fusing of two pernicious online threats, which would cause a big headache if encountered by users.

Some websites offering questionable tech support services are also dishing up ransomware, which locks up a users files until they pay a fee to decrypt them.

The support scams involve trying to convince users they have a computer problem and then selling them overpriced software or support services to fix it. It's often done via a pop-up message that urges people to call a number or download software.

Symantec has seen tech support websites also trying to install ransomware in the background. Ransomware is malware that encrypts a computer's files and asks for a payment, often in bitcoin, for the decryption key to be released.

"Unfortunate victims could end up paying both the fake tech support scam for 'help' and the ransom to decrypt their files, " wrote Deepak Singh, an associate threat analyst with Symantec, in a blog post.

On one tech support site seen by Symantec, an iframe hidden on the page redirected to the Nuclear exploit kit, a popular one used to spread malware.

It's unclear if the people running tech supports scams are working with those who create and rent out the use of exploit kits and associated infrastructure. But some tech support scams have experimented with ransomware, Singh wrote.

It's also possible that the tech support websites, like many other websites, have been compromised in order to redirect visitors to exploit kits.

"Regardless, this is the first time we've seen tech support scams running in tandem with the Nuclear exploit kit to deliver ransomware," Singh wrote. "If this proves to be an effective combination, we are likely to see more of this in the future."

Follow Us

Join the New Zealand Reseller News newsletter!

Error: Please check your email address.

Slideshows

IN PICTURES: Ingram Micro Innovation hits Auckland with Hewlett Packard Enterprise

IN PICTURES: Ingram Micro Innovation hits Auckland with Hewlett Packard Enterprise

Ingram Micro completed its nationwide roadshow in Auckland last month, kicking off its Innovation Hour series with Hewlett Packard Enterprise. Uncovering the latest in storage, networking and servers, the event outlined key market trends for resellers in 2016 and beyond.

IN PICTURES: Ingram Micro Innovation hits Auckland with Hewlett Packard Enterprise
IN PICTURES: FireEye celebrates channel at 2016 Partner Conference

IN PICTURES: FireEye celebrates channel at 2016 Partner Conference

FireEye welcomed 143 channel partners and distributors to FireEye's 2016 annual Partner Conference, FireEye A/NZ Momentum - held at Establishment in Sydney. Delegates heard from senior trans-Tasman channel leaders, marketing and the product divisions in the morning, with FireEye customers, incident responders and threat intelligence analysts sharing knowledge during the afternoon.

IN PICTURES: FireEye celebrates channel at 2016 Partner Conference
​IN PICTURES: Disruption in the data centre - Can the Kiwi channel capitalise?​

​IN PICTURES: Disruption in the data centre - Can the Kiwi channel capitalise?​

With New Zealand businesses now open to innovation, the industry sits on the cusp of significant disruption in the data centre. Driven by software-defined networking, the future of the data centre is fast becoming reality, as the channel seeks to keep up, keep innovating and keep growing. APC by Schneider Electric, Lenovo and key partners outlined how the channel can capitalise at The Grill restaurant in Auckland.

​IN PICTURES: Disruption in the data centre - Can the Kiwi channel capitalise?​
Show Comments