Another Rogue product from LocusSoftware

Following up on a post from Sandi who is reporting yet another malicious advertisement (.swf) that redirects several times until you land on one of many rogue Antispyware products from LocusSoftware



When you click the Download button you are routed to a “secure” page where you are prompted to purchase their (bogus) product … as I predicted before once Comodo revoked their certificated from the WinFixer/SetUpAHost (LocusSoftware) group …


“Good news gang … I was informed by Comodo that they have revoked all certificates issues to the WinFixer/SetUpAHost … I know it’s only a small victory but it causes them to look elsewhere, and I’m sure it won’t take them long to establish another bogus setup …”


Looks like they switched to “ipsCA” for their certificates … (highlighted in blue)



What’s scary about this connection is ipsCA is a certificate issuer via Microsoft … from the info on their site …


 Image edited for display purposes.


I’ll be contacting the involved parties to see if they will revoke these certificates as well …



Comments are closed.