DomPlayer - Rogue Multimedia Player

DomPlayer is a new rogue multimedia player on the loose. The gang behind DomPlayer is making use of fake video files (available as torrents) to spread this malware. Such fake video files instruct users to download and install DomPlayer (from http://download.domplayer.com/) to play the file. Here's a screenshot of DomPlayer's webpage:

Obviously this player is a fake and demands user to purchase it during installation. It doesn't install if you don't transfer money to their accounts!

It is detected by few AVs as Adware.Lop.BJ, Busky.K and Virus.Trojan.Win32.Obfuscated.en, as shown in this VirusTotal scan result:

This player seems to be a descendant of 3wPlayer, which also used fake video files as a means to get installed in a PC. In addition to this, DomPlayer is published/promoted by Cash4Downloads. Cash4Downloads is also affiliated with Adware programs like WinZix, 3wPlayer and NetPumper.

Avoid DomPlayer at any cost ;)

Read More

Attack of the Google clones

So far, we have seen many fake pages of sites like PayPal, eBay etc. which were used for phishing purposes. Now, here are some Google-like sites - www.google-find-it.com and www.qooqqle.com - which offer fake/irrelevant search results.

Here's a screenshot of www.google-find-it.com:

The first two results in www.google-find-it.com always redirect to a dubious looking search engine called www.jacobsearch.com.

And, here's a screenshot of funnily named www.qooqqle.com, with a layout similar to that of Google:

The site qooqqle.com seems to be from the same gang which is behind the Spamdexing site www.klikvipsearch.com.

Read More