Notice: Trying to access array offset on value of type bool in /mnt/volume_lon1_01/wikireplied/public_html/wp-content/plugins/wp-word-count/public/class-wpwc-public.php on line 123
There are several components constituting the average tech support scam. First off, threat actors need to infect a Mac computer with a malware strain that runs malicious JavaScript code in an infinite loop. This type of infection, commonly referred to as a hijacker or PUP (potentially unwanted programme), forces Internet hits to a predefined web page containing an error message and generating persistent pop-ups off and on 🤓 Secondly, the crooks have to utilize some sort of intimidation hype in order to pressure a victim into following rogue recommendations 👍 In the case of the ongoing Mac fraud campaign under scrutiny, this scare component is the notorious Zeus virus 🔥 [1]
Zeus Trojan (or Zbot Trojan) is a computer virus that attempts to steal confidential information from the compromised computer.The Trojan itself is primarily distributed through spam campaigns and drive-by downloads, though given its versatility, other vectors may also be utilized. The user may receive an email message purporting to be from organizations such as the FDIC, IRS, MySpace, Facebook, or Microsoft. The message body warns the user of a problem with their financial information, online account, or software and suggests they visit a link provided in the email. The computer is compromised if the user visits the link, if it is not protected. (last modified 91 days ago by Nephi Alford from Udon Thani, Thailand) [2]
Based around a new article from malwaretips.com, your browser may be redirected to the sites that display the “Your System Has Detected Zeus Virus” fake error messages either by malicious advertisements on the sites you visit or adware. This guide was written to help Windows users remove malware from their devices, if your just looking for a way to block the “Your System Has Detected Zeus Virus” redirect on a specific site, then you can use a free browser extension like Adblock.When it comes to adware, these malicious programs are bundled with other free software that you download off of the Internet. Unfortunately, some free downloads do not adequately disclose that other software will also be installed and you may find that you have installed adware without your knowledge. [3]
Robyn Medeiros at bestsecuritysearch.com, mentions how the Zeus malware is notable for enforcing a stealth detection module. It is able to detect if there are any sandbox or debug environments active on the infected host. If such are detected or an anti-virus product is found, then the Zeus trojan virus automatically deletes itself to prevent detection. This is done by checking the installed programs, folders and Windows registry for the following strings: AntivirusProduct (generic identifier), McAfee, Symantec, Norton, Kaspersky, Avast and “antivirus”. The malicious engine has been found to take over process ownership and modify the anti-virus real time engines or configuration files. Some viruses have also been found to even hijack the anti-virus products and remove them entirely. In other cases they are are disabled but still present on the machines. The false sense of security is essential to some attack campaigns. [4]
Shona Hall from novirus.uk, explains how zeus virus (also known as ZeuS or Zbot) is a trojan horse that was first released back in 2007 for Windows operating systems and primarily used to steal financial data from victims, although it is not the only feature of the cyber threat. It was also used to insert CryptoLocker ransomware and record keystrokes. In addition, malware was involved in a massive compromise of high-profile organisation sites from NASA, ABC, Oracle, Amazon, Cisco, and others. The multi-million dollar illegal business resulted in the arrest of more than 100 people related to Zeus trojan. At its prime in 2009, the virus infected 3.6 million machines worldwide and formed a most massive botnet to date. However, once ZeuS virus was terminated in 2011, tech support scammers started to actively abuse the name of the threat, inserting phishing messages into various websites and threatening users that their sensitive information will be compromised if they will not contact the alleged support via the provided number. (edited by Cynthia Mendoza from Agartala, India on April 1, 2020) [5]
Article References
- https://macsecurity.net/view/151-remove-zeus-virus-mac-alert-scam-from-safari-chrome-and-firefox
- https://malwaretips.com/blogs/zeus-trojan-virus/
- https://malwaretips.com/blogs/remove-your-system-has-detected-zeus-virus/
- https://bestsecuritysearch.com/zeus-trojan-virus-removal-guide-windows/
- https://novirus.uk/zeus-trojan/