Fake Pop-up: Your Windows drivers expired today

Scams
1

[link contains pop-up with fake information about drivers being expired and tries to send you to download malware]

[link now DEAD]

hxxp://microsoft.com.cdn.downloadcenter1.faith/newlander/microsoftwarningx.html?isp=Tpg%20Internet%20Pty%20ltd.&osversion=Windows%2010&ip=203.221.48.213&voluumdata=BASE64dmlkLi4wMDAwMDAwMy01MmUzLTQzNTItODAwMC0wMDAwMDAwMDAwMDBfX3ZwaWQuLmRlN2I5ODAwLTc1YmQtMTFlNy04MWFjLWU2NzQ2ZjVmZjIyYl9fY2FpZC4uOTYyODk4MzktMDI0MC00NDliLWExZjctODg1NzM2YzI4YTVhX19ydC4uRF9fbGlkLi45ZTczZjA5YS1jMDNjLTQzZTUtYmI2Zi05MWVkMDQwZWI1ZGVfX29pZDEuLmMyY2NjYzBhLTFiYjEtNDZhOS1iOTI2LTlhZWFmYzBlYjhjMl9fdmFyMS4ubm92ZW1iZXItdGFuLU1ZcVRoVVJJX192YXIyLi55b3V0dWJlLHVvdXR1YmUsdW91dHViZVwuXGNvbV9fdmFyNC4uTk9OLUFEVUxUX192YXI1Li5ET01BSU5fX3JkLi51c2RcLlxxdWViZWMtbGVhXC5cY29tX19haWQuLl9fYWIuLl9fc2lkLi5fX2NyaS4uX19wdWIuLl9fZGlkLi5fX2RpdC4uX19waWQuLl9faXQuLl9fdnQuLjE1MDE0ODYxNDAyMjI#

Don't download anything unless you're using a VM and know what you're doing.

Edit: had to add full link

2

The “Update” button doesn’t even work anymore! It just throws a 400 error. xD

3

@ppqq1#10819

My mistake.

Full link required:

[LINK SENDS YOU TO A SITE TO DOWNLOAD MALWARE IF YOU CLICK ‘UPDATE’]

[Link now DEAD]

hxxp://microsoft.com.cdn.downloadcenter1.faith/newlander/microsoftwarningx.html?isp=Tpg%20Internet%20Pty%20ltd.&osversion=Windows%2010&ip=203.221.48.213&voluumdata=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#

Clicking the "update" button should send you to here:
[THIS SITE HAS THE MALWARE TO DOWNLOAD]
hxxp://lp.pcfixer.online/cd2/?override=1&pxl=WCL1703_WCL1668_RUNT&s6=9e73f09a-c03c-43e5-bb6f-91ed040eb5de&utm_campaign=wclkpcft&utm_pubid=56400&utm_source=wclkpcft&x-at=61898691-d486-478a-97af-937bed078429&x-context=S2ZcS0qiLk_CQ8AvmDFbN-p4ir1CfBHmPME9AMA70YHgVCm6k-IYKCkhdYyBfd8EIcxbGS_O5lwzRTMuhviw1Fl5ar-XPvB74TWCcHo4aZWQQ04u8agZiXR9WJCHu5lFgAfgVE0TJhKnGbIRXa8Y6IuNpZeaNhfhcttTIgGi5wtOKxU-tq6jWQYb_suehHUnB5V6CFaXeZ4WbfRsuOe832AisiJvBZ-IhoG_lKJCbapzfNsxeOa1yQWJ8u0JSGye5AylZa8vq7KlJG67k94sfWcojBSSQIBt60A3Ba3UG-_1h7ujIFba6L920aKuZVsTy1TnFT_wVnSpv0MQ1g0v436V7g4TLFYfD5ftcQfJSbvKxqVRDa0QsqIEY2vfx3sscB_XoWePXIM2iZyzsOSaRaDovtr8STnb5IILixZUnEUOCqudHEqgDhnf4Pf6GkHwPJqHxToOxrdbOLV7zDKczA%3D

4

Here’s a shortened link for the malware download:

http://bit.ly/2uUkJKC

Here's a shortened link for the main site:
http://bit.ly/2f57tPv

Plus, why does everyone use hxxp instead of http???

5

@ppqq1#10901

Thank you for the shortened link.

I noticed other people using hxxp and I assume it’s for dangerous links and to prevent accidental clicking of the link.

6

@AussieScamBuster#10984 Ohhh…

7

It’s for links that lead to popups, browser locks or malicious content.

8

Could I get the number please?

9

@76561198092788864#11099 number probably went down along with the site. It might just redirect u to some random person.