Rogue affiliates are sending emails to antivirus software customers that falsely claim that the customer’s subscription is expiring in order to trick them into updating their subscription early. Security software affiliates are third-party sites that send visitors to antivirus software companies to earn a commission if a sale is made. Legitimate companies that offer affiliate programs have strict guidelines on how to promote their software and prohibit misleading and false advertising. BleepingComputer became aware of scam emails this week that tell recipients that their Norton and McAfee antivirus software is expiring that day and prompting them to renew their license. The scam emails contain language such as “WARNING: Antivirus Can Expire” or “Your Protection Can Expire TODAY!” and include a link that sends them through the affiliate’s link, then redirects to the legitimate antivirus software company to earn a commission for the affiliate if the customer pays for the software.
Written by: Nataliia Zdrok, Threat Intelligence Analyst at Binary Defense Russia’s invasion of Ukraine increased