The rogue AV compromises another advertisement platform

Oct 17, 2011 07:03 GMT  ·  By

After infecting the popular internet connection speed test website, it's time for another highly visited location to get compromised into serving the malicious Security Sphere 2012.

Armorize informs us that Avast recently marked the torrent website as containing malware, but its administrators quickly denied it.

“Our users that are using the Avast anti-virus might have noticed that KAT.ph suddenly became labeled as a dangerous website for users that are not logged in. We want to assure our users that KickassTorrents has no malware or viruses of any kind and it is absolutely safe to use our website.

"We already contacted Avast and currently we are trying to find and fix the cause of this problem. You will help us if you choose the "Report the file as a false positive" option if you get the alert,” a post said on the site.

Right after Avast acknowledged that what users could see was a false positive, the website's OpenX platform which is utilized for advertisements was overtaken to serve the malicious rogue AV, which keeps popping up, alerting the internaut of fake errors on his system.

As all scarewares, Security Sphere requires the victim to purchase a license in order to get rid of the pesky messages.

Unfortunately, with these types of infections, the unsuspecting customer doesn't need to click on anything in order to get plagued. It's enough that he visits the page without having an updated browser of extensions.

Even more unfortunate is that at the moment only 5 of 43 security vendors detect the malevolent file as being a threat, so be sure to stay clear of the site until the issue is solved.

To make sure you don't fall victim to these phony anti-virus solutions, don't click to install anything that comes from an unknown or untrusted provider. Also, make sure your browsing utilities and all their add-ons are always up to date.