Skip to main content

Security Tidbits : New nasty on the way? New Mac rogue? Plus beware of Some Myspace Friends


(opens in new tab)

There’s a new site out for a rogue security product, NanoAntivirus. This looks like it will be a potential replacement (or additional rogue version) of the pernicious Antispyware Pro XP (opens in new tab).

Binaries are not active (yet). However, a fake scanner page is already up: scan. antispyware-free-scanner. com/100525/8/ (if you don’t add the 100525/8/, you get the Antivirus XP Pro scan, complete with fake “porn” that’s been “found” on your computer).

This site is a sister to WiniGuard (opens in new tab), a rogue antispyware program related to Innovagest 2000 (opens in new tab)… a noted bad actor…

However, there are no downloadable binaries. Something to keep an eye on, though.


(opens in new tab)

Just to put this into context, we’ve seen the Innovagest gang around some really horrific products, likeAntivirus XP 2008 (opens in new tab), XP Antivirus (opens in new tab) — and much more.

If you get this Friend Request in MySpace, it’s not a good one.

Friend request123333

(opens in new tab)

Here’s the profile page:


(opens in new tab)

However, clicking on the page brings up this oddball page:


(opens in new tab)

Notice the use of a “translate” page on Google. Possible a new redirect type of activity to avoid filters…

The page pushes a Zlob (opens in new tab)fake codec variant, disguised at a “MySpace Profile Object”.

Thanks to Big R, a security researcher, for this catch.

Alex is a technology CEO, with leadership, operating partner, investor, and board member roles at security firms including AutoLoop, Borland, Quarterdeck (now Symantec and Cisco WebEx), GFI/TeamViewer, Sunbelt Software (now ThreatTrack Security), BlueStripe Software, StopBadware, Knowbe4, Malwarebytes, and Runaware Holding AB. When CEO of Sunbelt he ran a security blog, and he still writes on security.