Phoathoosurvey.space Runs Fake Survey
During the investigation of suspicious websites, our team of researchers came across the phoathoosurvey.space malicious page. Its primary purpose is to promote deceptive content and engage in browser notification spam. Additionally, this webpage has the capability to redirect visitors to other sites that are likely untrustworthy or hazardous.
Users typically encounter pages like phoathoosurvey.space through redirects generated by websites that utilize rogue advertising networks.
The behavior exhibited by rogue webpages, including the content they load and promote, may vary depending on the visitor's IP address or geolocation.
At the time of our research, phoathoosurvey.space was involved in a survey-based scam resembling "TESCO Loyalty Program," "T-Mobile Customer Reward Program," "Millionaire (Миллионером)," and numerous other similar schemes.
Furthermore, phoathoosurvey.space requested permission to display browser notifications. If granted, the site would bombard users with notifications and advertisements promoting online scams, unreliable or harmful software, and even malware.
To summarize, encountering websites like phoathoosurvey.space can expose users to system infections, significant privacy issues, financial losses, and the risk of identity theft.
How Can Bad Actors Use Fake Surveys to Spread Potentially Unwanted Software?
Bad actors can utilize fake surveys as a deceptive tactic to spread potentially unwanted software (PUPs) or other malicious programs. Here's how they can accomplish this:
Illusion of Legitimacy: Fake surveys are designed to appear legitimate and trustworthy. They may mimic well-known brands or companies, using their logos, colors, and branding elements. This illusion of legitimacy convinces users to participate in the survey, thinking it is from a reputable source.
Survey Participation Requirements: Fake surveys often claim that users must complete certain steps, such as answering questions or providing personal information, in order to receive a reward or access desired content. The requirement to download or install specific software may be included as part of the survey process, masking the installation of potentially unwanted software.
Downloading PUPs as Rewards: In some cases, users are promised rewards or access to exclusive content upon survey completion. However, instead of receiving the promised rewards, they are prompted to download or install software that is bundled with PUPs. These PUPs may include adware, browser hijackers, or other unwanted applications that negatively impact the user's browsing experience or compromise their privacy.
Malicious Software Bundling: Fake surveys can serve as a vehicle for distributing malicious software by bundling it with legitimate-looking survey software or applications. Users are tricked into downloading and installing the bundled software, unknowingly infecting their devices with malware or other harmful programs.
Social Engineering and Data Collection: Fake surveys often employ social engineering techniques to manipulate users into sharing sensitive information. They may request personal details, such as name, email address, phone number, or even financial information under the guise of survey requirements. This data can be exploited for identity theft, phishing attacks, or sold to other malicious actors.
