Computers being held to ransom by fake antivirus
A new threat demands that victims pay up for fake antivirus, or they don’t get their computer back.
A new and more aggressive way for criminals to make cash from fake antivirus has emerged.
It involves malware hijacking a user's computer until victims pay up or reformat the system.
Previously, the victim would be sent a series of warnings to buy a paid version of the fake antivirus, but security firm Panda warned that this was now being combined with ransomware.
An infected computer is unable to run a program or open a document, and only responds with a message that all files were infected and the only solution is to buy the fake antivirus.
The fake antivirus would be offered for around 75, with users paying the ransom' receiving a serial number to type into the application.
Once this data is entered, all the information held hostage would be released, although the fake antivirus will remain on the system.
"Users are often infected unknowingly, in most cases, through visiting hacked websites, and once a computer is infected it is extremely difficult to eliminate the threat, even for those with a certain degree of technical knowledge," said Luis Corrons, technical director of PandaLabs, in a statement.
Sign up today and you will receive a free copy of our Future Focus 2026 report - the leading resource for IT decision-maker insight on priorities and investment areas in AI, security and more.
"Users are also prevented from using an type of detection or disinfection tool, as all programs are blocked. The only application that can be used is the internet browser, conveniently allowing the victim to pay for the fake antivirus," he added.
-
Standing still is riskier than doing nothing when it comes to AI: Snowflake urges companies to embrace the era of the agentic enterpriseNews The pace of change is unrelenting, so doing nothing is no longer an option, the AI data firm told attendees at a recent event in London…
-
High performance, low latency, greater efficiency: how the Dell PowerStore 9500 array enhances any modern data centerWhitepaper Scale smarter and eliminate storage bottlenecks without expanding your footprint
-
‘Cyber criminal groups suffer from the same security weaknesses they routinely exploit’: ShinyHunters claims it hacked Clop ransomware rivalNews An attack on the cyber crime gang could prove dangerous for previous victims of data leaks, experts have warned
-
Companies are still paying ransoms to cyber criminals despite official adviceNews A Proofpoint survey found evolving ransomware techniques and the use of AI is exacerbating the situation for victims
-
This one cyber crime group accounted for nearly a fifth of all ransomware attacks in JuneNews The Gentlemen, a ransomware a service operator, now accounts for 17% of published attacks
-
Working with the enemy: Ransomware negotiator-turned cyber criminal jailed after working with hackers to extort clientsNews Angelo Martino was supposed to be negotiating on behalf of victims, but was secretly working for ransomware operators
-
Hackers are posing as Interpol to target small businesses – here's what you need to knowNews Small businesses are warned to think twice before clicking on links
-
‘Every hour ransomware goes undetected drastically increases its potential blast radius’: Hackers are breaching networks and laying low for longer – and nearly half of firms don’t realize until data is stolenNews An ExtraHop survey found more intrusions are going undetected, leading to longer dwell times
-
Ransomware cartels are fragmenting into volatile splinter groups, warns Met Police cyber chiefNews Commoditized "cyber crime bazaars" and AI data mining are forcing law enforcement to rewrite its playbook
-
New ransomware threat group, The Gentlemen, has become one of the most active ransomware operators, accounting for 10% of all attacksNews NTT researchers warn that the RaaS group is leveraging SystemBC malware to establish covert tunnelling, evade detection, and support rapid lateral movement across enterprise environments