FakeXPA… Journey of a Rogue
Rogue security products have been around for some years, and now they seem to be everywhere. In my previous blog about Trojan:Win32/Antivirusxp I talked about the relationships between rogue products and various other threats. One common behavior of rogue products is their ever-changing domain names and user interfaces. Most rogue products emerge and then disappear into thin air. However, a few persist and remain the "big fish" to catch.
http://blogs.technet.com/mmpc/archive/2008/12/09/fakexpa-journey-of-a-rogue.aspx
