{"id":52921,"date":"2025-01-29T06:17:09","date_gmt":"2025-01-29T11:17:09","guid":{"rendered":"https:\/\/www.kaspersky.com\/blog\/?p=52921"},"modified":"2025-01-29T06:17:09","modified_gmt":"2025-01-29T11:17:09","slug":"what-is-scareware","status":"publish","type":"post","link":"https:\/\/www.kaspersky.com\/blog\/what-is-scareware\/52921\/","title":{"rendered":"Scareware: fake threats, real risks"},"content":{"rendered":"<p>Imagine: you\u2019re calmly working away on your computer, when suddenly a scary message appears on the screen: \u201cYour computer is infected with viruses! Install an antivirus immediately!\u201d or \u201cYour data is at risk! Clean your system immediately!\u201d Panic? That\u2019s what the scammers are hoping for.<\/p>\n<p>This post explains what scareware is and why this threat is dangerous. We also give tips for avoiding falling for scarewarers\u2019 tricks, and protecting you and your family from such attacks.<\/p>\n<h2>What is scareware?<\/h2>\n<p>Scareware is a type of digital fraud that weaponizes users\u2019 fears. The aim is to frighten the victim into visiting a malicious site and downloading something they shouldn\u2019t. Scareware usually mimics antiviruses, system optimizers, registry cleaners, and the like. But other, more exotic types also exist.<\/p>\n<div id=\"attachment_52926\" style=\"width: 644px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2025\/01\/29052858\/what-is-scareware-1.jpg\"><img decoding=\"async\" aria-describedby=\"caption-attachment-52926\" class=\"size-full wp-image-52926\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2025\/01\/29052858\/what-is-scareware-1.jpg\" alt=\"Scareware notification \" width=\"634\" height=\"508\"><\/a><p id=\"caption-attachment-52926\" class=\"wp-caption-text\">The user is not so subtly informed that no fewer than five viruses have been found on their computer. However, the window header contains a small misprint: \u201cThreaths detected\u201d <a href=\"https:\/\/en.wikipedia.org\/wiki\/Scareware\" target=\"_blank\" rel=\"nofollow noopener\">Source<\/a><\/p><\/div>\n<p>To display their alarming messages, scammers tend to deploy browser pop-up windows and notifications, <a href=\"https:\/\/www.zdnet.com\/article\/scareware-scheme-operator-thrown-behind-bars-for-targeting-us-media\/\" target=\"_blank\" rel=\"nofollow noopener\">banner ads<\/a>, and on occasion even good-old email.<\/p>\n<p>Scareware creators use a variety of <a href=\"https:\/\/www.kaspersky.com\/blog\/social-engineering-tricks\/48539\/\" target=\"_blank\" rel=\"noopener nofollow\">social engineering<\/a> tricks to instill a sense of danger in the user. Often, threatening messages appear at the most unexpected moment \u2014 catching the victim off guard.<\/p>\n<p>And scammers frequently hurry the victim into taking rash actions \u2014 not giving them time to think things over. Then, when the target has been properly prepared (that is, put into a state of panic), the attackers offer a simple solution to the problem: just install such-and-such software and all your troubles will be gone.<\/p>\n<div id=\"attachment_52927\" style=\"width: 1149px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2025\/01\/29053056\/what-is-scareware-2.jpg\"><img decoding=\"async\" aria-describedby=\"caption-attachment-52927\" class=\"size-full wp-image-52927\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2025\/01\/29053056\/what-is-scareware-2.jpg\" alt=\"Fake antivirus \" width=\"1139\" height=\"449\"><\/a><p id=\"caption-attachment-52927\" class=\"wp-caption-text\">Fake antiviruses pretend to search for malware in the user\u2019s system. <a href=\"https:\/\/www.kaspersky.com\/blog\/fake-antivirus-what-are-they-and-how-do-you-avoid-them\/2898\/\" target=\"_blank\" rel=\"noopener nofollow\">Source<\/a><\/p><\/div>\n<p>Upon receiving a scareware notification, in the best case scenario the victim will install a useless but harmless program on their device and pay a relatively small sum for the pleasure. But sometimes an attack can have more serious consequences. Under the guise of an \u201cantivirus\u201d or \u201csystem optimizer\u201d, the victim may be fed proper malware that encrypts data or steals money from online bank accounts.<\/p>\n<h2>Sextortion scareware<\/h2>\n<p>Sometimes scammers employ a hybrid scheme: scareware combined with <a href=\"https:\/\/www.kaspersky.com\/blog\/all-sextortion-schemes-2024\/52436\/\" target=\"_blank\" rel=\"noopener nofollow\">sextortion<\/a>. It may go as follows: the user receives an intimidating email saying they\u2019ve been caught in a compromising video.<\/p>\n<p>To see for themselves, the victim is invited to visit a website where they can watch the footage. However, to view the video, they first need to install a special player. This, of course, is malware in disguise.<\/p>\n<h2>Faulty screen caused by a virus<\/h2>\n<p>In a new variant of the scareware scheme, the user is told that a virus has infected their smartphone. Nothing unusual so far\u00a0\u2014 mobile versions of scareware have been around for ages. Here, however, the focus is artfully placed on what perhaps all smartphone owners fear the most: a faulty screen:<\/p>\n<div id=\"attachment_52925\" style=\"width: 778px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2025\/01\/29052513\/what-is-scareware-3.jpg\"><img decoding=\"async\" aria-describedby=\"caption-attachment-52925\" class=\"size-full wp-image-52925\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2025\/01\/29052513\/what-is-scareware-3.jpg\" alt=\"A faulty screen \u2014 falsely presented as the result of a virus \" width=\"768\" height=\"1013\"><\/a><p id=\"caption-attachment-52925\" class=\"wp-caption-text\">The scareware simulates screen damage caused by a virus that must be removed.<a href=\"https:\/\/www.mobile-hacker.com\/2024\/11\/27\/smartphone-scareware-cracked-screen-as-a-result-of-virus\/\" target=\"_blank\" rel=\"nofollow noopener\">Source<\/a><\/p><\/div>\n<p>Curiously, the \u201cfaulty\u201d display \u2014 which also blinks for added alarm \u2014 is capable of clearly showing the message about the supposed virus infection. How this window is able to float above a damaged screen is a mystery\u2026 To \u201cfix\u201d the screen, you just need to tap the button in the box and purchase the offered \u201cantivirus\u201d.<\/p>\n<h2>How to protect against scareware<\/h2>\n<p>Of course, the best defense against fake \u201cprotection\u201d is the real thing. To defeat scareware, install a <a href=\"https:\/\/www.kaspersky.com\/premium?icid=gl_bb2023-kdplacehd_acq_ona_smm__onl_b2c_kdaily_lnk_sm-team___kprem___\" target=\"_blank\" rel=\"noopener nofollow\">bona fide antivirus from a reputable developer<\/a>, keep a close eye on its notifications, and always heed its recommendations.<\/p>\n<p>Also bear in mind that it\u2019s seniors who are most likely to fall victim. So it\u2019s worth helping your older relatives get the right protection since it can be a challenge for them.<\/p>\n<input type=\"hidden\" class=\"category_for_banner\" value=\"premium-family\">\n","protected":false},"excerpt":{"rendered":"<p>Scareware is malware that scares users into doing something risky. Here\u2019s how it works.<\/p>\n","protected":false},"author":2706,"featured_media":52922,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[2683,9],"tags":[111,36,152,97,513,422],"class_list":{"0":"post-52921","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-threats","8":"category-tips","9":"tag-attacks","10":"tag-malware-2","11":"tag-scareware","12":"tag-security-2","13":"tag-social-engineering","14":"tag-threats"},"hreflang":[{"hreflang":"x-default","url":"https:\/\/www.kaspersky.com\/blog\/what-is-scareware\/52921\/"},{"hreflang":"en-in","url":"https:\/\/www.kaspersky.co.in\/blog\/what-is-scareware\/28483\/"},{"hreflang":"en-ae","url":"https:\/\/me-en.kaspersky.com\/blog\/what-is-scareware\/23737\/"},{"hreflang":"en-gb","url":"https:\/\/www.kaspersky.co.uk\/blog\/what-is-scareware\/28611\/"},{"hreflang":"ru","url":"https:\/\/www.kaspersky.ru\/blog\/what-is-scareware\/38949\/"},{"hreflang":"ru-kz","url":"https:\/\/blog.kaspersky.kz\/what-is-scareware\/28737\/"},{"hreflang":"en-au","url":"https:\/\/www.kaspersky.com.au\/blog\/what-is-scareware\/34566\/"},{"hreflang":"en-za","url":"https:\/\/www.kaspersky.co.za\/blog\/what-is-scareware\/34193\/"}],"acf":[],"banners":"","maintag":{"url":"https:\/\/www.kaspersky.com\/blog\/tag\/threats\/","name":"threats"},"_links":{"self":[{"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts\/52921","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/users\/2706"}],"replies":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/comments?post=52921"}],"version-history":[{"count":4,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts\/52921\/revisions"}],"predecessor-version":[{"id":52929,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts\/52921\/revisions\/52929"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/media\/52922"}],"wp:attachment":[{"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/media?parent=52921"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/categories?post=52921"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/tags?post=52921"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}