Fake antivirus software is spreading through a massive online campaign.

Beware: a massive email campaign is underway to trick users into opening an HTML file attachment that redirects users to a hacked website containing links that further lure victims into launching a fake antivirus software package. According to security firm Sophos, the email messages are designed to trick people into paying to remove threats from their computer that may not really exist. Once a user’s system is infected with the fake antivirus software, it gives bogus warning messages encouraging them to pay for non-existent threats to be removed. Another danger involves users potentially revealing sensitive financial information such as credit card numbers to the hackers.

To avoid such threats, users are advised to never open suspicious emails, and to only use legitimate, well-known security providers and consultants in case they suspect something wrong with their computer systems. Working with trust-worthy vendors gives you peace of mind knowing your systems are safe.