Fake Windows 8 Key generators surface

Cyber criminals are out to exploit PC users looking for Microsoft's Windows 8 by unleashing new malware.

Trend Micro researchers have recently come across malicious apps that lure PC users to download "Windows 8", for a price.

Trend Micro researchers have identified two samples that are packaged as key generator apps for Windows 8, which are available onhttp://{BLOCKED}en2eqqh2.cloudfront.net. Key generators are used to generate serial numbers and are typically used for bootleg copies of paid software. An analysis found that the apps found were malicious.

The detected apps are ADW_SOLIMBA and JOKE_ARCHSMS respectively.

"The people behind these malware are hoping to ride on Windows 8's popularity and some user's eagerness to try out the software. For security purposes, users must avoid visiting or downloading from untrusted sources. Better yet, users should instead purchase the legitimate program," said Rajat Sahu, Product Marketing Manager, India & SAARC, Trend Micro

When executed, ADW_SOLIMBA displays a fake message informing users to click ‘OK' to download Windows 8 via the web browser. On the other hand, JOKE_ARCHSMS purports as a Windows 8 activator. Similar to ADW_SOLIMBA, JOKE_ARCHSMS also displays images to trick users into thinking that they can activate Windows once they have sent an SMS to a certain number.

In addition, it also connects to the following URLs for click fraud:

http://{BLOCKED}rchant.net/api/open.php?aid=2102499&v
http://{BLOCKED}rchant.net/50qjpr21e2bd/2102499/