Beware of Hicurdismos: It’s a fake Microsoft Security Essentials installer that can lead to a suppor

ronjor · Oct 22, 2016

msft-mmpcOctober 21, 2016

We recently discovered a threat detected as SupportScam:MSIL/Hicurdismos.A that pretends to be a Microsoft Security Essentials installer. Microsoft Security Essentials is our antimalware product for Windows 7 and earlier. In Windows 10 and Windows 8, Windows Defender provides antimalware protection and is installed and enabled by default when Windows is installed. However, some users may believe they also need to download and install Microsoft Security Essentials.
Click to expand...

Krusty · Oct 26, 2016

I just got an email from the Australian Government:

You are advised to be wary of malicious software (malware) that pretends to install Microsoft’s anti-malware product ‘Microsoft Security Essentials ‘ for Windows 7 and earlier, and may also deceive users of Windows 8 and Windows 10.

According to Microsoft’s Threat Research and Response Blog, the vendor recently identified a threat it called SupportScam: MSIL/Hicurdismos.A (Hicurdismos). Hicurdismos pretends to be an installer of Microsoft Security Essentials, the vendor’s anti-malware product for Windows 7 and earlier. (While Windows 10 and Windows 8 use Windows Defender as a default anti-malware product, Microsoft acknowledges that ‘some users may believe they also need to download and install Microsoft Security Essentials.’)

Instead of installing Microsoft Security Essentials, Hicurdismos installs malware onto the victim’s computer that brings up a fake version of a screen that states an error has occurred and the machine needs to restart.

The screen also includes a false contact number for technical support. ‘Calling the indicated support number will not fix the [problem], but may lead to users being encouraged to download more malware under the guise of support tools or software that is supposed to fix a problem that doesn’t exist,’ Microsoft says.

Hicurdismos is categorised as a ‘tech support scam’. These scams aim to trick people into installing malware and remote access tools on their computers to enable attackers to gain control of systems and information. Stay Smart Online has issued alerts about similar attacks in the past, including a variant where attackers will cold call people in their homes to try and scam them.

One way of identifying if the error message is a scam is the inclusion of a telephone number for technical support. Microsoft notes that ‘real error message screens do not include a technical support number. Instead they will provide you with an error code and instructions for more information.’ The vendor also reiterates that Windows 10 has Windows Defender built-in, so there is no need to install Microsoft Security Essentials.
Click to expand...

Log in or Sign up

Beware of Hicurdismos: It’s a fake Microsoft Security Essentials installer that can lead to a suppor

ronjor Global Moderator

Krusty Registered Member

Log in or Sign up

Beware of Hicurdismos: It’s a fake Microsoft Security Essentials installer that can lead to a suppor

ronjor Global Moderator

Krusty Registered Member

Useful Searches