Home > Insights > Blogs 

CA Community

This Blog

GreenAV: rogue security software and social engineering walk together

Published: September 03 2009, 12:29 PM
by Rossano Ferraris

Recently, an application called Green AV has infected some users’ computers.

Why Green?  Malware authors use social engineering techniques to commit cyber crime by appealing to environmental causes by using a name such as Green AV.

Green AV is a rogue security software product that tells users that they donate a part of every Green AV software product sold to environmental causes (see Figure 1).


Figure 1 – Fake Story by GreenAV

Once rogueware infects a machine, it causes a stream of pop-ups on the desktop, causing slower performance of the entire computer system (Figure 2).


Figure 2 – Pop-ups

Then a fake scan starts on the desktop without the user’s permission (Figure 3):


Figure 3 – Fake scan

With fake results (Figure 4):


Figure 4 – Fake warning results

We can see the effects of the infection from the screen shots, and these effects are similar to those caused by most rogue security software.  The authors used social engineering techniques to lure people to purchase the software by appealing to people's desire to help the environment.

CA Security products block and remove this infection which is detected as GreenAV.

Recommendations:

  • Keep your security software updated to latest signatures
  • Never purchase this type of security software since you could be giving your credit card information to fraudsters and making yourself a target of identity theft

 

 

Share this post:  EmailEmail

By: Rossano Ferraris
Rossano Ferraris based in Italy and is the functional lead of the Internet Security Intelligence team, within CA’s Internet Security Business Unit (CA ISBU). His main objectives are to identify emerging and prevalent threats in order to provide strategic security responses to the internet security and...
Read More..

4 people have left comments:

 
 
Page Tools