The Underground Economy of Fake Antivirus Software

Douglas Steigerwald, Giovanni Vigna, Christopher Kruegel, Richard Kemmerer, Ryan Abman and Brett Stone-Gross

University of California at Santa Barbara, Economics Working Paper Series from Department of Economics, UC Santa Barbara

Abstract: Fake antivirus (AV) programs have been utilized to defraud millions ofcomputer users into paying as much as one hundred dollars for a phony softwarelicense. As a result, fake AV software has evolved into one of the most lucrativecriminal operations on the Internet. In this paper, we examine the operations of threelarge-scale fake AV businesses, lasting from three months to more than two years.More precisely, we present the results of our analysis on a trove of data obtainedfrom several backend servers that the cybercriminals used to drive their scam operations.Our investigations reveal that these three fake AV businesses had earned acombined revenue of more than $130 million dollars. A particular focus of our analysisis on the financial and economic aspects of the scam, which involves legitimatecredit card networks as well as more dubious payment processors. In particular, wepresent an economic model that demonstrates that fake AV companies are activelymonitoring the refunds (chargebacks) that customers demand from their credit cardproviders. When the number of chargebacks increases in a short interval, the fakeAV companies react to customer complaints by granting more refunds. This lowersthe rate of chargebacks and ensures that a fake AV company can stay in businessfor a longer period of time. However, this behavior also leads to unusual patternsin chargebacks, which can potentially be leveraged by vigilant payment processorsand credit card companies to identify and ban fraudulent firms.

Keywords: Social and Behavioral Sciences; cheating; computer security; fraud detection (search for similar items in EconPapers)
Date: 2011-06-01
New Economics Papers: this item is included in nep-iue
References: View complete reference list from CitEc
Citations: View citations in EconPapers (1)

Downloads: (external link)
https://www.escholarship.org/uc/item/7p07k0zr.pdf;origin=repeccitec (application/pdf)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:cdl:ucsbec:qt7p07k0zr

Access Statistics for this paper

More papers in University of California at Santa Barbara, Economics Working Paper Series from Department of Economics, UC Santa Barbara Contact information at EDIRC.
Bibliographic data for series maintained by Lisa Schiff ().