Select Page

Cyren Security Blog

The Cyren Security Blog is where Cyren engineers and thought leaders provide insights, research and analysis on a range of current cybersecurity topics.

YeheyTV searchers end up watching Fake Antivirus – SEO Poisoning

YeheyTV is an Internet site offering Filipino television shows online. The site has been around since 2009 and is frequented by Filipinos around the world. FakeAV distributors have exploited this popularity by using a Search Engine Optimization (SEO) poisoning attack directed at Internet users looking for the YeheyTV site.

Searching for the keywords “yeheytv pinoy” via YAHOO, GOOGLE or BING search engine gives the following results:

Clicking the highlighted links above will not lead to online TV shows but rather to pages with fake system messages such as these:

From this point on clicking any button will lead users to fake scanning pages – a common trick used by Fake AV to fool users into downloading and executing various malicious files.

Command antivirus detects this downloaded file as “W32/FakeAV.BEW“.

Don’t just watch Internet TV! Keep your antivirus definitions as well as Windows up to date to ensure protection from this malware.

Safe browsing (and TV watching)!

You might also like

Phishing with QR codes

Don’t Scan or be Scammed By Maharlito Aquino, Kervin Alintanahin and Dexter To In 1994, a type of the matrix barcode known as the Quick Response code, now widely known as QR code, was invented by Masahiro Hara from a Japanese company Denso Wave. The purpose of the...