Menu

Social Engineering

Scareware

Scareware is a social engineering technique that uses a fake warning to frighten you into doing what the attacker wants. The warning often claims your device is infected, your files are about to be deleted or your protection has expired.

The message is designed to look like it comes from security software you can trust. It may show a red warning triangle, an official-looking logo, a list of invented viruses or a countdown timer. These details make the danger feel real and urgent, so you act before you stop to ask whether the warning is genuine.

The attacker wants one of three things: for you to follow a link, to pay for a repair or clean-up that does nothing, or to install malware by clicking a button that seems to remove the threat. The fake warning is the lure; the fear it creates is what makes the trick work.

For example, a window labelled "System Scanner" opens on a laptop while a student is revising. A progress bar fills up, then a list of 47 problems appears next to a button marked "Activate full protection". After entering card details, the family is charged £40 and nothing is fixed. Not every version asks for money: some offer a button that says it will remove the threat, but it installs malware instead.

Scareware works because fear and urgency push people to act quickly. A warning that seems to come from a trusted security tool is hard to ignore, and the short time limit stops you from closing the window and checking whether the warning is real.

Practise this