{"id":1477,"date":"2019-04-06T19:33:39","date_gmt":"2019-04-06T19:33:39","guid":{"rendered":"http:\/\/www.syyhoaxanalyzer.com\/?p=1477"},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-29T17:00:00","slug":"Fake-AppleCare-Virus-Warning-Pop-Ups-Link-to-Malware","status":"publish","type":"post","link":"https:\/\/www.syyhoaxanalyzer.com\/?p=1477","title":{"rendered":"Fake AppleCare Virus Warning Pop-Ups Link to Malware"},"content":{"rendered":"<div>\n<p style=\"text-align: center;\"><span style=\"color: #800000;\"><em><strong>Note:<\/strong> \u00a0As discussed below, very similar scams target iOS and Android phone users and those who use Windows-based computers. This report focuses on the version of the scam that targets Mac computer users.<\/em><\/span><\/p>\n<hr \/>\n<p>At some point, many Mac users will likely encounter a browser pop-up warning claiming that their computer is infected with viruses. \u00a0 <\/p>\n<p><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js\"><\/script><br \/>\n<!-- HS Net Top Content Responsive --><br \/>\n<ins class=\"adsbygoogle\"\n     style=\"display:block\"\n     data-ad-client=\"ca-pub-0355887770822260\"\n     data-ad-slot=\"4870821038\"\n     data-ad-format=\"auto\"><\/ins><br \/>\n<script>\n(adsbygoogle = window.adsbygoogle || []).push({});\n<\/script><\/p>\n<p>The pop-up, \u00a0which features seemingly genuine AppleCare logos and Apple menu links, claims that a security check has found traces of malware and phishing that require immediate \u00a0removal. \u00a0 It warns that your personal and banking information is at risk and urges you to click a &#8220;Scan Now&#8221; button to avoid further damage to your system and remove the supposed threats.<\/p>\n<p>To get you to take immediate action, the pop-up also displays a timer that supposedly \u00a0shows how many minutes and seconds you have until the damage caused by the viruses is permanent.<\/p>\n<p>Despite its appearance, however, the message has no connection to Apple and the virus infection claims are false.<\/p>\n<p>Instead, the \u00a0supposed warning message is a scam designed to trick you into installing rogue antivirus software and other types of malware.<\/p>\n<p>If you click the scan button, \u00a0 you will be redirected to another webpage that appears to be performing a &#8220;deep scan&#8221; of your computer. At the end of the scan, a results page will inform you that your computer has a large number of dangerous infections that need to be dealt with urgently.<\/p>\n<p>The page will instruct you to click a download button to install software that can supposedly \u00a0rid the computer of infections and fix other security issues. It then claims that you must buy the software using your credit card before the infections can be removed.<\/p>\n<p>But, alas, the scan is entirely fake. The infections that the scan supposedly finds are simply made up. \u00a0 The software that you pay for and install will not effectively deal with malware or security problems as it claims to do. Instead, it is itself malware. And, once installed, it may download further malware components.<\/p>\n<p>Moreover, the unscrupulous and unethical vendors \u00a0who use such tactics to scare people into purchasing their dodgy products now have your credit card details. \u00a0<\/p>\n<p><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js\"><\/script><br \/>\n<ins class=\"adsbygoogle\"\n     style=\"display:block; text-align:center;\"\n     data-ad-format=\"fluid\"\n     data-ad-layout=\"in-article\"\n     data-ad-client=\"ca-pub-0355887770822260\"\n     data-ad-slot=\"9162856233\"><\/ins><br \/>\n<script>\n     (adsbygoogle = window.adsbygoogle || []).push({});\n<\/script><\/p>\n<h2>What \u00a0to do if You Encounter \u00a0a Fake Virus Infection Pop-Up<\/h2>\n<p>If one of these pop-ups appears in your browser, do not click on any buttons or links that it contains.<\/p>\n<p>In some cases, the pop-up will prevent you \u00a0from closing the browser window.<\/p>\n<p>If so, you may need to terminate your browser session. Here&#8217;s how:<\/p>\n<p>1: Hit Command + Option + Esc to open the \u00e2\u20ac\u0153Force Quit Applications&#8221; window.<\/p>\n<p>2: Select the name of the browser you are using and hit the \u00e2\u20ac\u0153Force Quit&#8221; button.<\/p>\n<p>If you have already hit the scan button, you have installed the rogue software, or if the bogus popup continues to appear after you have closed and reopened your browser, you should first scan your computer using a legitimate anti-malware program.<\/p>\n<p>We recommend \u00a0<a title=\"Malwarebytes\" href=\"https:\/\/www.malwarebytes.com\/\">Malwarebytes<\/a>, which is free for home users.<\/p>\n<p>If the problem persists, <a href=\"https:\/\/malwaretips.com\/blogs\/remove-your-mac-is-infected-with-popup-adware-virus-scam\/\">refer to this report for further information. \u00a0<\/a><\/p>\n<h2>Variations<\/h2>\n<p>Versions of the same scam target people using iPhones and iPads as well as those using \u00a0<a href=\"https:\/\/www.hoax-slayer.net\/your-computer-has-been-blocked-tech-support-scam-browser-popups\/\">Windows<\/a> and <a href=\"https:\/\/www.hoax-slayer.net\/watch-fake-virus-warnings-android-phones\/\">Android<\/a>.<\/p>\n<p>And, very similar scam pop-ups claim that your Mac has been blocked and you must call a support number for assistance. These are tech-support scams designed to trick you into giving your credit card details to online criminals and installing malware. We discuss this variation in a <a href=\"https:\/\/www.hoax-slayer.net\/mac-has-been-blocked-scam\/\">separate report here<\/a>.<\/p>\n<h2>Screenshot of scam popup:<\/h2>\n<p><a href=\"https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2018\/08\/mac-viruses-malware-popup.jpg\" data-rel=\"penci-gallery-image-content\" ><img loading=\"lazy\" decoding=\"async\" data-attachment-id=\"21046\" data-permalink=\"https:\/\/www.hoax-slayer.net\/fake-applecare-virus-warning-pop-ups-link-to-malware\/mac-viruses-malware-popup\/\" data-orig-file=\"https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2018\/08\/mac-viruses-malware-popup.jpg\" data-orig-size=\"800,590\" data-comments-opened=\"1\" data-image-meta=\"{&quot;aperture&quot;:&quot;0&quot;,&quot;credit&quot;:&quot;&quot;,&quot;camera&quot;:&quot;&quot;,&quot;caption&quot;:&quot;&quot;,&quot;created_timestamp&quot;:&quot;0&quot;,&quot;copyright&quot;:&quot;&quot;,&quot;focal_length&quot;:&quot;0&quot;,&quot;iso&quot;:&quot;0&quot;,&quot;shutter_speed&quot;:&quot;0&quot;,&quot;title&quot;:&quot;&quot;,&quot;orientation&quot;:&quot;0&quot;}\" data-image-title=\"mac-viruses-malware-popup\" data-image-description=\"\" data-medium-file=\"https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2018\/08\/mac-viruses-malware-popup-300x221.jpg\" data-large-file=\"https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2018\/08\/mac-viruses-malware-popup.jpg\" class=\"aligncenter size-full wp-image-21046\" src=\"https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2018\/08\/mac-viruses-malware-popup.jpg\" alt=\"Fake Mac Virus ALert\" width=\"800\" height=\"590\" srcset=\"https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2018\/08\/mac-viruses-malware-popup.jpg 800w, https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2018\/08\/mac-viruses-malware-popup-300x221.jpg 300w, https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2018\/08\/mac-viruses-malware-popup-768x566.jpg 768w, https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2018\/08\/mac-viruses-malware-popup-500x369.jpg 500w, https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2018\/08\/mac-viruses-malware-popup-585x431.jpg 585w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/a><\/p>\n<p><strong>Transcript:<\/strong><\/p>\n<blockquote>\n<p>Your system is infected with 3 viruses!<\/p>\n<p>&nbsp;<\/p>\n<p>Your Mac is infected with \u00a0<strong>3<\/strong> \u00a0viruses. Our security check found traces of \u00a0<strong>2<\/strong> \u00a0malware and \u00a0<strong>1<\/strong>phishing\/spyware. System damage: 28.1% &#8211; Immediate removal required!<\/p>\n<p>&nbsp;<\/p>\n<p>The immediate removal of the viruses is required to prevent further system damage, loss of Apps, Photos or other files. Traces of \u00a0<strong>1<\/strong> \u00a0phishing \/spyware were found on your Mac.<\/p>\n<p>&nbsp;<\/p>\n<p><strong>Personal and banking information are at risk.<\/strong><\/p>\n<p>&nbsp;<\/p>\n<p>To avoid more damage click on &#8216;Scan Now&#8217; immediately. Our deep scan will provide help immediately.&#8221;<\/p>\n<p>&nbsp;<\/p>\n<\/blockquote>\n<p><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js\"><\/script><br \/>\n<!-- Third Content Ad Responsive --><br \/>\n<ins class=\"adsbygoogle\"\n     style=\"display:block\"\n     data-ad-client=\"ca-pub-0355887770822260\"\n     data-ad-slot=\"1909104632\"\n     data-ad-format=\"auto\"><\/ins><br \/>\n<script>\n(adsbygoogle = window.adsbygoogle || []).push({});\n<\/script><\/p>\n<div align=\"center\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js\"><\/script><br \/>\n<!-- HS Net Bottom AdLinks --><br \/>\n<ins class=\"adsbygoogle\" style=\"display: block;\" data-ad-client=\"ca-pub-0355887770822260\" data-ad-slot=\"1358951439\" data-ad-format=\"link\"><\/ins><br \/>\n<script>\n(adsbygoogle = window.adsbygoogle || []).push({});\n<\/script><\/div>\n<p><\/br><\/br> Original Source : <a href=\"https:\/\/www.hoax-slayer.net\/fake-applecare-virus-warning-pop-ups-link-to-malware\/\" target=\"_blank\">https:\/\/www.hoax-slayer.net\/fake-applecare-virus-warning-pop-ups-link-to-malware\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Note: \u00a0As discussed below, very similar scams target iOS and Android phone users and those who use Windows-based computers. This report focuses on the version of the scam that targets Mac computer users. At some point, many Mac users will likely encounter a browser pop-up warning claiming that their computer is infected with viruses. \u00a0 [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":6890,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-1477","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hoax-inggris"],"_links":{"self":[{"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=\/wp\/v2\/posts\/1477"}],"collection":[{"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1477"}],"version-history":[{"count":0,"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=\/wp\/v2\/posts\/1477\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=\/wp\/v2\/media\/6890"}],"wp:attachment":[{"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1477"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1477"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1477"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}