HTML/FakeAlert.LY!tr

Analysis

HTML/FakeAlert.LY!tr is a generic detection for a Phishing/Scam/Scareware that entices unsuspecting user's to logging/dialing in and potentially stealing the victims credentials/informations.
Below are some of its characteristics/behaviours:

• Based on our intial sample tests it mostly depicts MS Windows violation notices.


• The malware displays/contains the following interface/messages:
  

  Figure 1: Fake Alert message.

  
  

  Figure 2: Fake Alert message code within the JS/HTML body.

  
  

  Figure 3: Fake Alert message.

Recommended Action

• Make sure that your FortiGate/FortiClient system is using the latest AV database.
• Quarantine/delete files that are detected and replace infected files with clean backup copies.