Scareware is malicious software or a deceptive web page that frightens users with fake security warnings to push them into buying useless software, installing malware or calling fraudsters.
How scareware works
Scareware is a form of social engineering built on panic. A pop-up or a full-screen browser page imitates a system alert or a well-known security product and claims that the computer is infected with dozens of viruses. The victim is pushed to act immediately:
- buy a “full version” of a fake antivirus that removes non-existent threats;
- download a “cleaner” that is actually malware;
- call a phone number shown on screen, which leads to a tech support scam.
Modern scareware often runs entirely in the browser: the page switches to full-screen mode, plays an alarm sound and blocks the back button, so it looks as if the computer is locked. Victims typically arrive through malvertising, typo domains or push notifications they allowed by mistake.
Why scareware matters
Rogue antivirus programs such as WinFixer and Antivirus XP were a major criminal business in the late 2000s. The US Federal Trade Commission sued Innovative Marketing, the company behind several of these products, which were sold to more than a million consumers. Today scareware remains a common entry point for fraud targeting less technical users, particularly older people, and it can result in stolen card data or remote access to the victim’s computer.
How to protect against scareware
- Remember that browsers cannot scan your computer; an alarming web page is not a real warning.
- Close the tab or browser (Ctrl+W, Alt+F4 or Task Manager) without clicking anything on the page.
- Never call phone numbers from pop-ups or give remote access to unsolicited “support”.
- Revoke unknown notification permissions in browser settings and use legitimate security software.
