Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


SamF

1598 posts

Uber Geek
+1 received by user: 252

Trusted

#175157 19-Jun-2015 12:42
Send private message

* PLEASE NOTE: This scam is in no way any fault or responsibility of Countdown or any commercial entity or or organisation affiliated with Countdown or Progressive Enterprises.

It appears that there is a new scam doing the rounds at the moment; some form of adware which pops up with a 'user survey' when a user browses to countdown.co.nz.  The scam pages ask users to fulfil a short survey with the promise of heavily discounted promotional items and ultimately prompts users for their credit card information in order to complete the purchase of their discounted goods (which does not complete due to an 'Invalid Merchant Number').

The sites that are subsequently opened/referenced during the process are:
calllocalexpert.com
wowtrk.com
wiz-survey.com
health-consumer-rating.com
kiwilottoservice.com

There may be other sites as the discounted item selected in the instance I am aware of was lotto tickets.

A subsequent anti-spyware scan of the infected machine using 'SuperAntiSpyware', showed the following malware:





The malware appears to be cleaned up fine with SuperAntiSpyware.

Note that from what I can see, this malware is designed to target other sites as well, so it may not just be people visiting countdown.co.nz.

I contacted Countdown about the issue and they confirm that they are not running any such promotion and that they are aware of the issue and have had a number of others contact them about the same scam.  It's a pity that they haven't mentioned anything about this on their website.

I'm happy to provide as much information as I can regarding this to anyone who might want it.

Create new topic
johnr
19282 posts

Uber Geek
+1 received by user: 2526
Inactive user


  #1327836 19-Jun-2015 13:02
Send private message

malwarebytes should also remove it



kendo
213 posts

Master Geek
+1 received by user: 26


  #1327859 19-Jun-2015 13:49
Send private message

More likely your infected browser/machine than the countdown site.

Look into noscript, ublock and http://www.malwarebytes.org/antiexploit/

SamF

1598 posts

Uber Geek
+1 received by user: 252

Trusted

  #1327861 19-Jun-2015 13:57
Send private message

kendo: More likely your infected browser/machine than the countdown site.

Look into noscript, ublock and http://www.malwarebytes.org/antiexploit/



Per the first, bolded, * PLEASE NOTE * line in my original post:

SamF: * PLEASE NOTE: This scam is in no way any fault or responsibility of Countdown or any commercial entity or or organisation affiliated with Countdown or Progressive Enterprises.


Please also note the detailed notes and proven solution, also in my original post.

Thanks.



kiwitrc
4123 posts

Uber Geek
+1 received by user: 833
Inactive user


  #1327867 19-Jun-2015 14:20
Send private message

Dont forget the milk.

kendo
213 posts

Master Geek
+1 received by user: 26


  #1327869 19-Jun-2015 14:43
Send private message

The real solution is to prevent being infected with malware and even seeing such a thing in the first place.

SamF

1598 posts

Uber Geek
+1 received by user: 252

Trusted

  #1327875 19-Jun-2015 14:52
Send private message

kendo: The real solution is to prevent being infected with malware and even seeing such a thing in the first place.


For sure!  However, not all users I assist with such things have the knowledge and understanding required to prevent this kind of infection pre-emptively.  However, you can rest assured that I not only assist them to clean up their computers, but also educate them on the dangers and methods to avoid future infections, as well as providing them with the necessary tools to automatically prevent and / or remove such infections in future.

Create new topic








Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.