Cyber-criminals trick users with fake limousine offers and online ‘heart experts’

SYDNEY/AUCKLAND – February 12, 2012 – Bitdefender, creator of the world’s leading antivirus software, is issuing an alert to Valentine’s Day lovers, after spotting a wave of scams spreading worldwide before the love holiday.

Bitdefender advises users to stay away from fake limousine offers and online ‘heart experts’ who claim to heal troubled relationships. This type of scam spreads through spam and redirects users to phishing, fraud and malware-infected websites.

As men plan to spend 75 percent more than women for 2013 Valentine’s Day, according to a survey by CreditDonkey.com, scammers lure them with gift ideas. The bait that tricks men these days includes fake chocolate offers, diamond-like rings, perfumes, personalised gifts, heart-shaped jewelry and replica watches.

“Scammers have taken a shotgun approach to lovers on Valentine’s, with dating spam counting for almost 7 percent of all spam sent around the globe,” said Bitdefender Chief Security Strategist Catalin Cosoi. “Valentine’s Day brings an increase of romance scams, so people should be careful to avoid fake dating websites, love giveaways and phony social media profiles. These all collect their personal details for impersonation, extortion and money muling.”

A fast spreading scam tricks victims to download Valentine’s Day wallpapers which redirect to fraudulent websites. Users are told they won an iPhone 5 and asked for personal details. In the name of Cupid, similar scams circulate on Facebook, too.

Valentine’s Day games and Android apps downloaded from unofficial marketplaces such as free love calculators may install adware and malware.

In Australia, lovebirds should be wary of online Valentine’s Day cards, especially surprise emails that are labelled from secret admirers. Much like what happens in Germany, through BlackHat SEO techniques, they are redirected to poisoned search results that may install Trojans on their devices. Also they must be careful of opening any attachments that might enable malicious software like spyware or key-loggers to be downloaded to computers, leaving them vulnerable to cyber-criminals.

Malware designed to take control of login details from online gamers

MELBOURNE and AMSTERDAM – 11 February 2013 –AVG Technologies N.V. (NYSE: AVG), the provider of Internet and mobile security to 143 million customers, today released its Q4 2012 Community Powered Threat Report. This quarter’s report investigates a number of malicious software developments, including the case of a Trojan developed by an 11-year-old child to steal game login information.

Pre-teens turning to malware?

In a world filled with laptops, tablets and smartphones, today’s children become digitally fluent far earlier than previous generations. Now, AVG has found evidence that pre-teens are writing malware designed to steal login details from online gamers, both young and old.

While stealing someone’s game logins may at first seem a minor problem, online gaming accounts are often connected to credit card details to enable in-game purchases, and may also have virtual currency attached to them amounting to hundreds of dollars. Furthermore, many gamers unfortunately use the same login details for social networks such as Facebook and Twitter, potentially putting the victim at risk of cyber-bullying, in addition to identity theft and major inconvenience.

“We have now seen a number of examples of very young individuals writing malware, including an 11-year-old from Canada,” said Yuval Ben-Itzhak, Chief Technology Officer at AVG Technologies. “The code usually takes the form of a basic Trojan written using the .NET framework, which is easy to learn for beginners and simple to deploy via a link in an email or posted on a social media page.

“We believe these junior programmers are motivated mainly by the thrill of outwitting their peers, rather than financial gain, but it is nevertheless a disturbing and increasing trend. It is also logical to assume that at least some of those responsible will be tempted to experiment with much more serious cyber-crimes.” (Find more information on page 19 of the report).

Mobile threats continue to rise

The Q4 Threat Report also highlights the dramatic and ongoing increase in mobile malware, particularly of code designed to target Google’s hugely popular Android operating system. During the course of 2012, AVG Threat Labs reported on the First Android Rootkit, examples of mobile banking being targeted for attack, malicious apps that send text messages to premium rate services, and Trojan-infected versions of popular games on unofficial app stores, including bestseller Angry Birds Space.

Mobile threats also feature in the Threat Report’s predictions for 2013, notably in the form of increased MITMO (Man-In-The-Mobile) attacks that target PC and mobile Internet banking apps. Such threats might benefit from the growing BYOD trend, where workers connect their personal mobile devices to company networks.

Continued exploitation

Alongside the rise in mobile malware, the Threat Labs found exploit toolkits continue to dominate when it comes to online threats. Almost 60 per cent of all threat activity online was performed by exploit toolkits in 2012. The use of such kits is believed to be the result of established cyber-criminals realising that they can create and sell commercial toolkits at a premium to less technically savvy peers eager to get into the market. One example of a new exploit toolkit which emerged during the last quarter of 2012, and bore a remarkable resemblance to the Blackhole Exploit Kit, was the Cool Toolkit. This new toolkit accounted for 16 per cent of the top web threats in Q4 2012, topped only by Blackhole at 40 per cent.

Find other Community Powered Threat Reports at: Community Powered Threat Reports

Keep up to date with our regular threat bulletins on the AVG News & Threatsblog.