Internet offers us many possibilities, some of them are tempting, like downloading all types of programs without having to pay for it.
I’m not going to comment whether this is good or bad, I only want to warn you of the risks you may run, as the websites that offer this type of “products†are not always trustworthy.
In fact, we’ve detected several websites that offer cracks which actually distribute malware belonging to the Zlob family, Trojans mainly designed to download samples of rogueware.
The malicious websites are the following, among others:
crack-info.com
crack-key.com
crack-keygen-serial.com
crack-news.com
crack-software.com
crack-warez.com
crackblogs.com
cracknews.info
drcrack.com
search-crack.com
serial-key-serial.com
serials-keys.com
thecrack.name
warez-crack.com
wincrack.org
In the following image, you can see the appearance of some of them:
If you follow any of the links included in these pages, you’ll be actually downloading a Trojan of the Zlob family.
The malicious links have the following format:
http://mediagrouptag.com/video-plugin.XXXX.exe
where XXXX are random numbers
These are the domains we’ve found until now where the malicious files are hosted:
caredatasystem.com
companylogodata.com
greatwebmultimedia.com
logodataonline.com
mediaonlinecode.com
moviestandartonline.com
phpdatatools.com
plantfactfile.com
showallvideo.com
thedigitalinfo.com
bestfilesworld.com
greatestwavefiles.com
mediagrouptag.com
medialabelstore.com
In these cases, trying to avoid the payment of the license of the program can work out expensive, as it can imply theft of information or download of more malware.