SECURITYMALWAREBYTES LABS
Fake popular sites offer a free app, instead take over PCs
Attackers are distributing malware via lookalike websites impersonating popular sites like CNN, Avast, and Stremio to trick Windows users into installing a remote-access tool called O&O Syspectr. The campaign uses fake installers disguised as legitimate apps or browser games (e.g., cryptocurrency miners) to give attackers remote control of victims' PCs.
Related Signal
Adjacent reporting
- Fake Sites Mimicking Open-Source Tools Rank High on Google to Deliver Malware via TDS
- Fake Windows update installs hidden malware
- Hackers hijack thousands of sites for ClickFix and FakeUpdate attacks
- SEO-Poisoned Software Sites Abuse ScreenConnect to Deploy AsyncRAT
- WhatsApp phishing attack uses fake business docs to hack PCs