|
|
|
|
|
Windows 8 Activator
Published Feb 21, 2013
|
Trend Micro warned users to be careful about malicious schemes that promise free or discounted items that are too good to be true. Those schemes are effective because everyone likes a great offer. Especially when the offered item is a much-talked-about product like Windows 8, it’s even more attractive.
Last year, Trend Micro unraveled some fake Windows 8 generators that surfaced right after the platform’s release. However, cybercriminals are continuously using the brand to lure users into their ruse. This time the offer becomes "Windows 8 activators”, which comes amidst the news of Microsoft’s limited offer of a discounted Windows 8 upgrade.
"During our research, we found several websites using ‘Windows 8’ as keywords. The first site purportedly offers a free Windows 8 ‘activator’, which is actually fake, while another one is calls itself ’Windows 8 Activator Loader Extreme Edition 2013’,” said Paul Oliveria, research of Trend Labs. Trend Micro Smart Protection Network™ detects this activators as HKTL_KEYGEN.
Using the same tactic of the previous fake Windows 8 generator, HKTL_KEYGEN require users to enter their personal details and send a SMS message to proceed to the next step of the supposed installation process. Upon further investigation, Trend Micro found these sites were hosted on IPs located in Latvia or Romania. "These IP addresses also host .ru sites, which further sealed our suspicions, since we noticed that these addresses previously hosted sites that peddled fake versions of popular mobile apps like Instagram and Angry Birds.” Paul explained.
The popularity of Windows 8 and the chance to get one for free makes HTKL_KEYGEN effective at tricking users into downloading malware. Trend Micro strongly suggests users to be aware of these free offers. Trend Micro Smart Protection Network™ detects HTKL_KEYGEN and deletes it right away. It also blocks access to sites hosting these files.
Posted by
VMD - [Virtual Marketing Department]
|
|
|
