Mal/FakeAV-OY

ESG security researchers have observed a wave of malware attacks involving fake email messages from ADP urging computer users to update their security settings. These kinds of tactics are actually quite common when it comes to malware. Many malware developers will convince their victims to download malicious files by disguising them as security patches or anti-virus programs updates. These kinds of attacks are especially effective today when, due to highly publicized zero-day vulnerabilities in Java 7 and Internet Explorer, most computer users are looking for ways to make their computer more secure. In this way, this kind of publicity actually has the unintended effect of providing criminals with social engineering scams that can be used to distribute malware. Mal/FakeAV-OY is one of the many malware infections being distributed in this way.

ADP is a payroll processing company. Mal/FakeAV-OY is distributed through a fake email message from ADP supposedly containing a security update. These email messages contain subjects claiming that the email contains an attached '2013 anti-fraud update'. However, downloading and opening the attached ZIP archive infects the victim's computer with Mal/FakeAV-OY. The email message containing the Mal/FakeAV-OY infection includes an introductory letter assuring the victim that the attachment is an update to protect their computer from fraud. Next, Mal/FakeAV-OY lists all the new 'features' in this supposed update. The wording and letterhead of this email message is designed to convince victims of its authenticity, despite the fact that it is a trap, which results in a severe malware infection on the victim's computer.

How Mal/FakeAV-OY’s Payload Affects Your Computer

The Mal/FakeAV-OY malicious email message has been known to download and install rogue security software, also known as scareware or as fake anti-virus applications on the victim's computer. This is in line with the supposed security upgrade offered in Mal/FakeAV-OY's malicious email message. These kinds of fake security programs harass computer users, warning them of fake malware infections on their computer. This is done so that the victims will pay for a 'full version' of the rogue security program, usually handing over their credit card information in the process. It is necessary to be aware of computer security news and updates. However, it is important to be aware that many criminals disguise their malware as anti-virus software, meaning that not all anti-virus programs claims are what they seem.

SpyHunter Detects & Remove Mal/FakeAV-OY