FakeAV, now for Windows 7!

It’s been over a year since we first started seeing the familiar Windows XP My Computer page where it appears your drives are being scanned and it reports a bunch of non-existent malware on your computer. Yesterday I was investigating the latest hot news item where there was a FAMU (Florida Agricultural and Mechanical University) sex tape released on the internet and sure enough I found many SEO poisoned links claiming to have the video. Imagine my surprise when I saw the following.

It seems the malware folks have upgraded their look to the latest Windows 7! They have to assume people visiting their pages have upgraded to the latest Windows. After all, it seems less likely people will fall for a Windows XP My Computer looking page claiming they have malware when they’re running Windows 7. It will be interesting to see if all of these pages slowly convert to Windows 7, if this is just a one-off, or if they keep a mix of the two in the wild and just hope to get lucky.
Also for those curious as to why Google indexes these pages so highly, from the perspective of the Googlebot that indexes the web, this is what the pages looks like.

There (continue reading...)