Security firm Websense has discovered that search results on Microsoft’s Office homepage can lead users to a page hosting rogue AV.
Users searching on office.microsoft.com for help and tips on Office products are being targeted, the firm warns. As well as searching its own database for results the page also pulls together information from around the web.
Websense claims that it is these pages that are hosting the rogue antivirus technology and as the addresses begin with http://office.microsoft.com, users may be more willing to trust the site.
The user is redirected to a fake virus scan page which warns the user that their PC is infected. Clicking on the warning message will begin the download of an .exe file, which then infects the user’s PC.
