Security experts are warning users who are considering using Windows 8.1 activation key generators to install Microsoft's operating system for free. As the popularity of Windows 8 and Windows 8.1 continues to grow, scammers are taking advantage of the situation.
Ahasverus, a Softpedia, recently reported that he discovered a fake activator while testing Windows Enterprise 8.1 in a Virtual Box installed on a Mac OS X machine.
While searching the internet for some illegal Windows 8.1 activation software, he first discovered a lot of results that the search engine (Google) showed him. Ahasverus tried an activation software called Windows KMS Activator Ultimate 2014 1.7, which is about 10Mb in size (compressed).
The software claims to be able to crack Windows Vista, Windows 7, Windows 8, and Windows 8.1. In reality, however, it does not activate any of them, but that does not matter since the program's role is to trick users into installing other software.
Most antivirus engines don't recognize that anything suspicious is going on. However, the user quickly realized that the application wasn't exactly harmless.
Once he started the process, the app forced him to accept the installation of several other apps: Surftastic (a browser add-on that collects the user's data and displays ads) and Mobogenie (an app that offers Android games, but requests access to the user's SMS, photos, and contacts).
In the next phase, it gets even more interesting. The developers of the so-called activator ask their victims for permission to install a Bitcoin miner.
“In order to continue developing free applications, we would like you to install the following program on your computer that uses your CPU to mine virtual currencies,” the message states in the second phase of the installation process.
Of course, you can refuse the installation, but, as we all know, most people simply click the “Next” button when installing software, without thinking about it or reading what the developer writes.
After the installation is complete, the activator starts. However, at this point, the web browser is already hijacked and displaying ads.
The fake Windows 8.1 activation software connects to a remote server to update itself. Then it starts downloading things that are definitely not good for your computer.
Finally, the activator doesn't actually do anything. When the user tries to activate Windows, an error message appears.
