Home Malware Programs Trojans Trojan.FakeFlash

Trojan.FakeFlash

Posted: August 27, 2013

Threat Metric

Threat Level: 9/10
Infected PCs: 5
First Seen: August 27, 2013
Last Seen: May 11, 2020
OS(es) Affected: Windows

Trojan.FakeFlash is a component of a malware attack, which is used by cybercriminals in social engineering, drive-by downloads, and extortion to achieve their malicious aims. Trojan.FakeFlash spreads via a fake YouTube website that states to offer adult videos. PC users who visit the bogus website are offered to download a Flash Player update to view the content. The so-called update file is an executable that carries a legitimate Flash icon, but in reality it's a Trojan, detected as Trojan.FakeFlash, which disables the Task Manager and creates registry entries to make sure it can load automatically every time the affected computer system is started. In addition to the fraudulent Flash Player update, victimized PC users are also provided with the possibility to download all the adult videos from the website. The supposed videos are actually .scr (screensaver) files that disguise ransomware found as Trojan.Ransom.PARPE. If computer users attempt to close the false YouTube website, they're restricted from doing so by simple JavaScript, which keeps the window open even if the PC user presses the 'Leave Page' button. In the meantime, while the attacked PC user is busy attempting to close the window, an exploit hosted on the website is used to corrupt the computer with more malware threats.

Related Posts

Loading...