Scareware

Scareware, or sometimes called rogueware, are some fake security software. While pretending as legitimate anti-virus software or the likes, scareware is in fact dummy software without functions, or sometimes even a malicious software which may, for example, steal the victim's personal information and credentials such as passwords or credit card details.

Scareware usually entices victims by convincing them that a virus has infected their computer, then suggesting that they download (and pay for) an anti-virus software to remove it. Very often, the virus is entirely fictional, and the software installed is the scareware itself. In additional to the loss of money paid for the scareware, the personal details and credit card information provided by the victim during the purchase of the scareware can be used by criminals in further fraud or sold on black market forums.

Makers of scareware can also "kidnap" user’s computer and hold it to ransom by, for example, stopping the computer working or locking up some of the personal information. The victim needs to pay again to free their machine.

Protection against scareware would require the common best practices against malware, in particular, users must be cautious and exercise their common sense, and use of legitimate security software is of particular importance. Some best practices for protection against scareware, as well as other virus and malicious code attacks are:

• Don't use software from a dubious source under any circumstances.

• Do learn to protect yourself from visual spoofing. Some criminals try to use visual spoofing techniques to collect personal information or make you believe you are installing and accepting software / plug-ins / active content from a safe source.

• Do constantly be aware of any suspicious activities.