Less aggressive, more effective: social engineering with paid archives

Sergey Chernyshev Microsoft
Daniel Chipiristeanu Microsoft

  download slides (PDF)

The profitability of social engineering malware involving fake security software has inspired the bad guys to invent new money-making schemes at the expense of the ordinary user. Apart from the rogue anti-virus scam, there is another major subclass of socially engineered malware: paid archives. These are less aggressive by nature as they don't infect the system. Instead, they use a more cunning way to trick users into giving them money without using scare tactics - by getting them to pay for software that's otherwise free, or for pirated copies of paid software.

This paper will discuss the social engineering aspect of paid archives and provide in-depth analysis of the whole scheme - how the archives are generated using custom software installers, how users are tricked into buying the software, and how the money is earned and distributed by the bad guys.