Menu
Ransomware and scammy tech support sites team up for a vicious one-two punch

Ransomware and scammy tech support sites team up for a vicious one-two punch

One holds your files hostage, the other overcharges to fix nonexistent computer problems

Symantec has seen a curious fusing of two pernicious online threats, which would cause a big headache if encountered by users.

Some websites offering questionable tech support services are also dishing up ransomware, which locks up a users files until they pay a fee to decrypt them.

The support scams involve trying to convince users they have a computer problem and then selling them overpriced software or support services to fix it. It's often done via a pop-up message that urges people to call a number or download software.

Symantec has seen tech support websites also trying to install ransomware in the background. Ransomware is malware that encrypts a computer's files and asks for a payment, often in bitcoin, for the decryption key to be released.

"Unfortunate victims could end up paying both the fake tech support scam for 'help' and the ransom to decrypt their files, " wrote Deepak Singh, an associate threat analyst with Symantec, in a blog post.

On one tech support site seen by Symantec, an iframe hidden on the page redirected to the Nuclear exploit kit, a popular one used to spread malware.

It's unclear if the people running tech supports scams are working with those who create and rent out the use of exploit kits and associated infrastructure. But some tech support scams have experimented with ransomware, Singh wrote.

It's also possible that the tech support websites, like many other websites, have been compromised in order to redirect visitors to exploit kits.

"Regardless, this is the first time we've seen tech support scams running in tandem with the Nuclear exploit kit to deliver ransomware," Singh wrote. "If this proves to be an effective combination, we are likely to see more of this in the future."


Follow Us

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Featured

Slideshows

The making of an MSSP: a blueprint for growth in NZ

The making of an MSSP: a blueprint for growth in NZ

Partners are actively building out security practices and services to match, yet remain challenged by a lack of guidance in the market. This exclusive Reseller News Roundtable - in association with Sophos - assessed the making of an MSSP, outlining the blueprint for growth and how partners can differentiate in New Zealand.

The making of an MSSP: a blueprint for growth in NZ
Reseller News Platinum Club celebrates leading partners in 2018

Reseller News Platinum Club celebrates leading partners in 2018

The leading players of the New Zealand channel came together to celebrate a year of achievement at the inaugural Reseller News Platinum Club lunch in Auckland. Following the Reseller News Innovation Awards, Platinum Club provides a platform to showcase the top performing partners and start-ups of the past 12 months, with more than ​​50 organisations in the spotlight.​​​

Reseller News Platinum Club celebrates leading partners in 2018
Meet the top performing HP partners in NZ

Meet the top performing HP partners in NZ

HP has honoured its leading partners in New Zealand during 2018, following 12 months of growth through the local channel. Unveiled during the fourth running of the ceremony in Auckland, the awards recognise and celebrate excellence, growth, consistency and engagement of standout Kiwi partners.

Meet the top performing HP partners in NZ
Show Comments