Malwarebytes experts have analyzed the Xbox One scam

Jun 26, 2013 13:02 GMT  ·  By

Interested in an Xbox One emulator that allows you to play Xbox games on your computer? You should know that the sites advertising such emulators are probably run by scammers or cybercriminals.

One perfect example has been identified by experts from security firm Malwarebytes.

“We've got our hands on the leaked console and developed the first emulator for the Xbox One. It might be unstable at the moment but we are working hard to give you the best Xbox one experience,” reads a message in the description section of a YouTube video called “Xbox One Emulator (How to play Xbox One games on your computer.”

The video, which has already been viewed almost 100,000 times, instructs users to visit a website, emulatorxboxone.com, and download the emulator.

However, Malwarebytes experts have told The Inquirer that the YouTube video and the bogus Xbox One emulator website are part of a scheme that’s designed to distribute malware.

At first sight, the emulator might appear genuine, but the files offered on the shady website are actually some standard Microsoft libraries and a couple of files from the legitimate PlayStation 2 emulator.

When executed, the fake emulator – developed in .NET – informs victims that their BIOS is missing and instructs them to download it.

Those who accept are taken to a website where they’re told to complete an offer before they’re allowed access to the file. This scheme is often used by cybercriminals to harvest personal information from unsuspecting Internet users.

“Deceptive ploys like these have been around for a while and can be used for anything from advertising to spreading malware, and maybe both. In fact, one of the download mirrors for the Xbox One emulator is hosted by zippyshare, and contains a download for a fake Flash Player,” Malwarebytes experts said.

Update. Additional details on the scam are available on Malwarebytes' blog.