Fake AV: New Look & Feel
ID: db1c80f2-64ae-52ff-befb-b62c567639af
STIX ID: report--db1c80f2-64ae-52ff-befb-b62c567639af
Feed Name: Zscaler Security Research Blog
Threat Score
A researcher discovered a fake antivirus storefront page (hosted on scanerzone.cz.cc and a similar domain bestmalwarescaner.cz.cc) that animates a fake scan, warns of infections, and attempts to download a malicious file named "antivirus.exe". The sample was detected by 12 of 42 AV engines on VirusTotal at the time and the page initially bypassed Google Safe Browsing and browser SmartScreen filters; the researcher arrived at the page via SEO spam.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.