Thursday, 17 November 2011

CenterCash affiliate (Hoax SMS/Fake Installer)

For an unknow reason IT guys seem interested these day to Fake installers.
CF here: Easy Money: Program:Win32/Pameseg (part one) and here ~ More free software repackaged for money

And i got a mail today with a malware in attach, in reallity a fake installer.



Code is checked on the server, and by the same ocasion you found the url of the affiliate program:

Main:

Statistics:

Payement:

News:

frequently asked question:

Help:

Profile:

Banners:

Top:

Domains:

Bonus:

Style download/Help:

Archive maker:



And got my install with basic style:

I've made some test and submitted exe to VirusTotal, CenterCash archives are detected by 18 AV according to VT ~ http://www.virustotal.com/file-scan/report.html?id=7381cad4ad8444e3f40a8da3b1fe41f9ba6ef32ba113aef9ae88497f491978f3-1321538649
AVG fail with the 'FakeAV.SGP' signature :þ

No comments:

Post a comment