A website that claims to help surfers get rid of spyware actually infects visitors, a security firm has claimed.

Trend Micro discovered the website, known as Removal-tool.com, linked to other web pages that would infect surfers with spyware programs.

"Who'd suspect that a professional-looking anti-spyware site will give them just the opposite of what they're looking for — and even more?" asked Roderick Ordoñez of Trend Micro.

The site even includes blogs, news articles and product information to encourage visitors to click on links.

Ordoñez warned that the use of this tactic, though somewhat post-modern, was becoming more common.

"The use of legitimate-looking websites is a regular tactic in disseminating web threats, mainly used to fool users into downloading fake codecs, though security applications have also been reported in the past," he said.

One of the most disturbing things about the site, said Ordoñez, was how well it had been put together.

"Any web-savvy developer knows that professional design and robust content attract customers, and is most likely to earn their trust to initiate one more click. Sadly, even those with malicious intent abide by this rule, and most users can hardly tell a good site from a bad one," Ordoñez continued.

http://uk.trendmicro.com/uk/home

Back to index