DANGEROUS fake McAfee popup

Malware
, ,
1

Popup - https://browsing-guard.com/0826d5e8f0f44d4b739720bf64f79564/?lpkey=16c027ab30bc61f523&domain=click-identification-service.com&language=en-US&t2=juliet-tug-e66tghkf7&t3={t9}&t4=94&t5=Unknown&clickid=8e96d17nt3vfv3y951&lid=1655&cid=11681&uc=17nt3vfv3y&uclickhash=17nt3vfv3y-17nt3vfv3y-gx1mfe-2ta60-lp5mbl-wh8w0-whg58n-9a29e1

A WhoIs lookup reveals the domain was registered via NameCheap on June 8, 2021 - Whois browsing-guard.com

image
image1366×768 79.4 KB

Popup includes a PushFlow feature that will attempt to automatically subscribe the victim to subscribe to their “push notification” service via Microsoft Outlook. This even applies to users in incognito mode!

image
image692×247 8.88 KB