Threat Database Trojans Trojan.FakePlayer.B

Trojan.FakePlayer.B

By ZulaZuza in Trojans

Threat Scorecard

Ranking: 8,077
Threat Level: 20 % (Normal)
Infected Computers: 982
First Seen: March 14, 2012
Last Seen: September 18, 2023
OS(es) Affected: Windows

Trojan.FakePlayer.B Disguises Itself as a Source of Free Movies

With the advent of Netflix, high-speed Internet and great online movie streaming websites, a golden age for movie lovers is beginning. Online, computer users are able to find movie titles that would otherwise be near impossible to find. However, criminals are quickly taking advantage of the growing number of inexperienced computer users turning to the Internet for their movie needs. Fake media players, video codecs and bogus video streaming websites and advertisements are among some of the most common sources of malware infections found today.

Trojan.FakePlayer.B hides within a fake media player with the uncreative name of 'Web Player'. This fake media player sports a convincing website and a EULA that adds to its scam. However, ESG security analysts have found that the supposed web player Trojan.FakePlayer.B is actually part of an elaborate phishing scam that is aimed at gaining possession of the victim's email account. When the Trojan.FakePlayer.B web player starts up, Trojan.FakePlayer.B will ask the victim for their email address and password. Obviously, knowing that this web player is actually the Trojan.FakePlayer.B scam, it is not a good idea to disclose this information.

Malicious Websites Associated With the Trojan.FakePlayer.B Scam

After entering their information, victims are directed towards a malicious website which will try to convince the victim to download free movies. The selection offered will be a combination of popular new releases and classic films. The criminals behind the Trojan.FakePlayer.B scam have tried to circumvent possible security measures by setting up numerous versions of these malicious websites, with ESG security analysts receiving reports of at least seven different versions of these web pages at the moment of writing.

Each website has a different name, but it is clearly obvious that they were all designed by the same group of criminals. They offer to stream movies as long as the computer user 'registers.' However, not content with obtaining their victims' email accounts, criminals behind Trojan.FakePlayer.B will also ask victims to enter their credit card information in order to gain access to this nonexistent library of movies. After all, if their victim already fell for the first scam, why not go all the way? ESG malware analysts strongly recommend using media players that are recommended by numerous reputable sources or from well-known, established manufacturers.

File System Details

Trojan.FakePlayer.B may create the following file(s):
# File Name Detections
1. %ProgramFiles%\common files\auto.exe
2. %UserProfile%\auto.exe
3. %UserProfile%\.exe
4. %UserProfile%\jmfxs.drv
5. %windir%\fonts\.fon
6. %UserProfile%\.fon
7. %windir%\fonts\evngj.fon
8. %UserProfile%\.drv
9. %UserProfile%\

URLs

Trojan.FakePlayer.B may call the following URLs:

streamvidact.ru

Trending

Most Viewed

Loading...