Malware that goads people into purchasing a fake rogue anti spyware program to remove it, is old news, only the name changes.
So we have a new spin, MonaRonaDona appears to be malware created to scare people into purchasing a fake anti-virus product, Unigray AntiVirus.
According to an analysis by Kaspersky Lab, MonaRonaDona’s author is hoping the victim will conduct a Google search for instructions on how to remove it and thus to Unigray AntiVirus.
Unigray.com has only been in existence for two weeks now, said the Analyst’s Diary.
It seems very strange that such a new program would include detection for MonaRonaDona while legitimate antivirus products don’t.
Analysing the program further I found that it has only one removal routine. Guess for which malicious program? That’s right - MonaRonaDona. Unigray will clean it up for only $39.90 – this doesn’t sound like the best of deals to me.
A comparison of the code of MonaRonaDona and Unigray Antivirus show that there are many, many similarities. This leaves very little doubt that the same group is behind both MonaRonaDona and Unigray. And this case clearly shows that the bad guys are getting very good at social engineering.
If you have this infection please see this topic: http://www.dslreports.com/forum/r20088377-Re-MonaRonaDona-virus
{ 0 comments }
