Malware-remover.online Pushes Known Fake Virus Scam

Our researchers discovered the malware-remover.online rogue page while inspecting suspicious websites. It operates by running scams and promoting spam browser notifications. This webpage can also redirect users to different (likely dubious or misleading) sites.

Most visitors to malware-remover.online and similar pages access them via redirects caused by websites that use rogue advertising networks.

It is noteworthy that the content encountered on and through rogue websites might differ based on the visitor's IP address/ geolocation.

At the time of research, malware-remover.online promoted a well-known fake virus warning scam. It consists of a fake system scan that finds various issues and threats on the visitor's device. Typically, the goal is to trick users into downloading or installing unreliable or even malicious software.

Malware-remover.online also requested the visitor to enable its browser notification delivery. If allowed, the webpage will start spamming the user with notifications and advertisements that endorse online scams, untrustworthy or dangerous software, and potential malware.

How Can Misleading Sites Abuse Push Notification Functionality to Spam Ads?

Misleading websites can abuse push notification functionality to spam ads by taking advantage of users' permission settings and manipulating their browsers. Here's how they typically do it:

• Deceptive Dialog Boxes: Misleading sites often use deceptive dialog boxes that mimic legitimate browser notifications or alerts. These pop-ups are designed to confuse users and trick them into clicking the "Allow" button, granting the site permission to send push notifications.
• Fake Content and Promises: To persuade users to click "Allow," these sites may display fake content or make false promises. For example, they might claim that users need to enable notifications to access content, view a video, or download a file.
• Multiple Pop-Ups: Some misleading sites bombard users with multiple pop-up notifications in quick succession, making it difficult for users to decline them in time. This can lead to accidental permission grants.
• Notification Spam Campaigns: Once users have granted permission, the misleading site can send a barrage of push notifications, often containing ads or links to affiliate marketing pages. These notifications can be intrusive and disruptive.
• User Engagement Manipulation: Some sites use social engineering techniques to manipulate users into interacting with notifications. They might falsely claim that users have won a prize or that their system is infected, urging users to click on the notifications for further instructions.
• Redirects: Misleading sites may also employ browser redirects to lead users to pages that trigger push notification prompts automatically. Users may be caught off guard and grant permissions unintentionally.
• Browser Vulnerabilities: In some cases, misleading sites exploit vulnerabilities in specific browsers or browser extensions to force notifications or manipulate notification settings without the user's consent.