Malware authors use Conficker searches to spread rogue anti-virus

Symantec's John Park claimed that searches for Conficker and Downadup are revealing results that are infected with fake anti-virus sites. He revealed that following a result will lead to a malicious link that eventually leads to a rogue application installation website.

Park said: "Let's say you are curious about Conficker, or you think your computer might be infected with Conficker. By simply searching for ‘Conficker C,' page one of the results includes a link to an infected site being used to spread a fake anti-virus program.

"Even though we do not think the author of this rogue application is related to the author of Conficker, this incident shows us that the authors and affiliates of misleading applications don't want to miss a single opportunity to capitalise on established media attention.

"Some obvious words of advice: Be careful with the links you follow. A sincere effort to keep abreast of the latest security information might bring about some unwelcome surprises."