While Windows 8 has managed to increase curiosity among potential users, it is also becoming the focus of interest for hackers and cybercriminals.
According to a note from security solutions and services provider Trend Micro, they have already spotted two samples of key generator apps for Windows 8.
Key generators are used to generate serial numbers and are typically used for bootleg copies of paid software. Based on their analysis, the apps found are malicious. Trend Micro detects these as ADW_SOLIMBA and JOKE_ARCHSMS respectively.
“The people behind these malware are hoping to ride on Windows 8's popularity and some user’s eagerness to try out the software. For security purposes, users must avoid visiting or downloading from untrusted sources. Better yet, users should instead purchase the legitimate program,” said Rajat Sahu, Product Marketing Manager, India & SAARC, Trend Micro.
When executed, ADW_SOLIMBA displays a fake message informing users to click ‘OK’ to download Windows 8 via the web browser. On the other hand, JOKE_ARCHSMS purports as a Windows 8 activator. Similar to ADW_SOLIMBA, JOKE_ARCHSMS also displays images to trick users into thinking that they can activate Windows once they have sent an SMS to a certain number. In addition, it also connects to the following URLs for click fraud:
http://{BLOCKED}rchant.net/api/open.php?aid=2102499&v
http://{BLOCKED}rchant.net/50qjpr21e2bd/2102499/
“So far, using new programs, software, or apps as a social engineering lure has been an effective vehicle for attacks. Remember the malicious Instagram apps that surfaced just as news of Facebook’s acquisition of the app broke out? Similarly, malicious versions of Bad Piggies, Angry Birds Space were also uncovered in time for these apps’ release,” said the note by Trend Micro.
Cybercriminals and other bad guys on the Internet know what users want and they’ll use it to their advantage. Users can never be too careful about what to download and from what sites. These samples may not be the only malicious key generators tools available on the Internet.
