Sign In
Register
Help
Quote
Jan19-2012
Ins and Outs of One-Click Billing Fraud
5:00 am (UTC-7) | by Jonathan Leopando (Technical Communications)
What is this "one-click billing fraud" (also "one-click fraud") all about?
Contrary to the name, you need more than just one click to become a victim. This type of attack primarily targets users who want to view adult videos.
Users either go to video-sharing websites or adult blogs in order to watch adult videos online. Links to these sites are also spread via spam, blog comments, and social media. Once users stumble upon one-click fraud sites, users click around to explore the site.
Eventually, users are asked to download a program in order to watch a certain video. In reality, however, either no video will be played on the user system, or just a few seconds of it. Instead, the user will be confronted by multiple windows that ask the user to click an item on the screen to view the video in its entirety.
After this, they will reach a point where they can "download" the video. What ends up being downloaded is the main one-click fraud malware. These malware are often of the HTML/HTA (HTML Application), JS, and VBS file types, among other file types.. They are also detected by Trend Micro as HTAPORN or PORNY variants, among others.
Ins and Outs of One-Click Billing Fraud
5:00 am (UTC-7) | by Jonathan Leopando (Technical Communications)
What is this "one-click billing fraud" (also "one-click fraud") all about?
Contrary to the name, you need more than just one click to become a victim. This type of attack primarily targets users who want to view adult videos.
Users either go to video-sharing websites or adult blogs in order to watch adult videos online. Links to these sites are also spread via spam, blog comments, and social media. Once users stumble upon one-click fraud sites, users click around to explore the site.
Eventually, users are asked to download a program in order to watch a certain video. In reality, however, either no video will be played on the user system, or just a few seconds of it. Instead, the user will be confronted by multiple windows that ask the user to click an item on the screen to view the video in its entirety.
After this, they will reach a point where they can "download" the video. What ends up being downloaded is the main one-click fraud malware. These malware are often of the HTML/HTA (HTML Application), JS, and VBS file types, among other file types.. They are also detected by Trend Micro as HTAPORN or PORNY variants, among others.
More plus screenshots - http://blog.trendmicro.com/
MultiQuote