Perfecthosting.co

By GoldSparrow in Browser Hijackers

The Perfecthosting.co site may be misused by third parties that promote technical support services on the 844-507-3556 phone line. Computer users that are presented with a pop-up by Perfecthosting.co and cannot close the new window should not call 844-507-3556. Microsoft does operate the 844-507-3556 phone line, and you should not expect to receive legitimate service. Web filters like Sucuri, Websense, and Google Safebrowsing already block connections to Perfecthosting.co. The hosting company for Perfecthosting.co brought the site down soon after they received a complaint. Regardless of the status of the site, the content at Perfecthosting.co is flagged as phishing and featured an exploit of HTML5, which made the visitor's PC freeze.

Researchers reveal that the page at Perfecthosting.co was designed to reproduce a bug in the HTML5 coding and simulate a lockdown. In other words, a visitor at Perfecthosting.co was presented with a pop-up window that looked like an official message from Microsoft and directed the user to call 844-507-3556, which is supposed to be a toll-free phone line. Users were shown a warning that stated:

'Microsoft.Inc Warning! System has been infected
Microsoft Identification-Malware infected website visited. Malicious data transferred to system from remote access. System Registry files may be changed and can be used for unethical activities.
System has been infected by Virus Trojan.worm!055BCCAC9FEC - personal Information (Bank Detail Cards and Account Password) may be stolen System IP address 112.15.16.175 is unmasked and responsible for virus spreading. Microsoft has reported to the connected ISP to implement new firewall. User should call immediately to Technical Support 1-844-507-3556 for free system scan.'

Researchers remind users that the Perfecthosting.co page is designed to cause rendering error and use the aberrant behavior of your Internet client to convince you to call 844-507-3556. You should note that there are several typos, inconsistencies, and false information in the message above. The manufacturer of the Windows OS is the Microsoft Corp., not Microsoft.Inc. There isn't a threat listed as Trojan.worm!055BCCAC9FEC and the 112.15.16.175 IP address points to a communications hub in China. Security experts suggest users install a credible anti-malware scanner that can delete files related to Perfecthosting.co and alert the use of potentially dangerous connections.

Trending

Most Viewed

Loading...