We have always tried to advise customers that the “free” solutions are yesterday’s technology (at best) – and promote a false sense of security. While they might be ok for some very low-risk users, for the everyday user they are insufficient protection –
this report from Fudzilla about a phishing infection on one of the UK’s most well-used websites, Telecommunications + Internet Service Provider: British Telecom, just goes to show that anyone can get infected – and trusting in AVG Free would have resulting in malware infection to website visitors in this instance – using ESET NOD32 (or Smart Security) would have detected the malware and you would have been protected.
Source: Fudzilla
The official BT Group website (http://www.btplc.com) is being flagged by a number of Internet security checks and Anti-Virus firms because it has been infected by Phishing Malware.
ISP review noticed the problem when it attempted to load the btplc.com website on several computers protected by ESET NOD32 Anti-Virus software.
A few quick checks around the Internet reveal that some but not all other anti-virus vendors had either made a similar block or noted a related event on the btplc.com website. AVG’s free anti-virus software hasn’t detected anything but others like ESET’s NOD32 and Sucuri . The hack can result in someone taking over your computer remotely..
The site appeared to be infected by the MW:ANOMALY:SP8 malware virus, which has been around for a while. This makes the hack especially embarrassing for BT which is supposed to have a handle on these sorts of things. Still it could be worse, it could be a security company which had been infected by an ancient virus.
Things to note –
- ESET protection detected the threat – AVG Free did NOT detect it.
- The website infected wasn’t some hobby or small business site – it was British Telecom – the UK’s largest Telco/ISP
- This is not a brand NEW threat, the article even describes it as “around for a while”
- The phishing threat found on btplc.com was capable of initiating a remote pc take-over – ie, your machine when infected could have been controlled remotely by the criminals who infected the website (or sold to someone who could use your machine to steal your ID, or as part of a ‘botnet’.
- ESET wasn’t alone in detecting this threat, but that AVG Free did NOT detect it demonstrates what we have always said – Free products are sub-standard, and tend to promote a false sense of security
Reminder: Keep a *GOOD* Antivirus on your machine, keep it up to date, and do NOT trust the ‘free’ antivirus protection systems – they’re only worth what you pay for them! Additionally, run operating system, Flash, Java and other updates regularly and as needed!