Fake Antivirus Businesses Still Use Banks Across the World to Process Payments

In the virtual underground of hackers and cybercrooks who rely on what is called FakeAV black processing services, newfound opposition has been a major factor in the slowdown of FakeAV programs. Without these underground or black payment processing services readily in place, FakeAV creators and distributors have no way of really getting paid. FakeAV black processing services are comprised of malware domains created to serve as a gateway between payments for FakeAV apps and legitimate banking institutions. Because of their tie with real banks, the business of processing these payments becomes somewhat of a gamble.

Leading to the recent downturn of FakeAV distribution rings, some of the larger FakeAV networks were forced to tell their affiliates that unforeseen circumstances had arisen, to basically derail the moneymaking train for everyone. Most of the disruption was due to law enforcement agencies cracking down on the FakeAV industry as a whole, but some was contributed to uncovering FakeAV black processing services, or several payment processing URLs put in place to process payments from FakeAV app victims.

In some astonishing findings posted on the XyliBox.com blog, they were able to talk with a FakeAV black processing service. In their 'discussions', they were able to overturn multiple payment processor examples – some of which still used by popularized FakeAv apps, such as Security Monitor 2012. Of these payment processor URLs, listed below, they were found to work through specific banks. Of these banks, some are knowingly aware of the malware transactions but fail to cooperate with police. Basically, the carefully selected banks that the FakeAV black payment processing services do business with have somewhat of an 'understanding' and receive a percentage for their 'cooperation'.

List of malware payment processing URLs identified by Xylibox.com:

• paysafefast.com and secure.paysafefast.com
• onlinestartpayment.com and secure.onlinestartpayment.com
• activitypaymentplus.com
• flawlessbilling.com
• yourbestpayment.com
• ebillsys.com

You can think of the whole banking and black payment processing scheme to have an included restitution for allowing the services to take place, even in the dim light of malware-crime happening in the background. XyliBox blog, during their talk with the Fake AV black processing services, asked about the underlying trustworthiness and security of the bank, offshore accounts, duration of payments and types of payments. As an answer, simply put, they can transfer money through Wire Transfer, LR, WM, cash, where an offshore is needed to transfer money through wire.

With these recent findings due to XYliBox blog's talk, we could be witnessing some root causes to the recent slowdown of FakeAV rings. What better way to cause disruption within these organizations than to expose what fuels their money trains. Talk about a derailment waiting to happen off of a steep cliff if the right authorities start to get wind of other FakeAv black payment processors.