As expected, the success of the coder WannaCry continues to excite the minds of cybercriminals. Because of the notorious attacks currently not heard by a few units, using the name WannaCry is very convenient for intimidating already frightened users. So, the cryptographer already had a number of imitators and followers, and now the trend of the lowest level of cybercriminal - fraudsters from fake technical support - has attracted attention.
This week, the British National Agency for Combating Crime issued a warning to users, saying that network scanners already use the name WannaCry for intimidation:
"One victim became a victim of scammers, after a call to the number of" technical support ", which was advertised in a pop-up window. The window did not close, saying that the user was the victim of a WannaCry extortionist, - law enforcement agencies write. - The victim gave remote attackers access to his PC after he was convinced that he does not have enough anti-virus protection. Scammers installed malware on the computer for remote access and claimed 320 pounds for their services. "
Moreover, McAfee specialists noticed that the official Google Play catalog was flooded with suspicious applications, also related to WannaCry (see the upper figure). Some of them are quite harmless and help to "play" friends, displaying a fake window with the demand for redemption on the device screen. Other applications are different "guides" that summarize information about WannaCry in plain text format. Also, the researchers found an application scanner that works so badly that instead of detecting WannaCry, it marks itself as a potential threat.
Although there are no frankly malicious solutions among this abundance yet, all applications display obsessive advertising, parasitize the name of the popular encryptor, convince users to install additional "garbage" software and bring their creators good money.