Found it on some top result for a long tail keyword I was researching:
Whoever made this put a lot of effort into making it look real. It had the dim effect of the UAC along with the “bong” sound, very realistic ui elements and etc. Kind of odd to go through all of that, but I guess its all for realism… banking on the fact that many people just hear the sound and see the dim and assume its a legit installation. There were a few giveaways though, such as the fact that it got my OS and browser wrong. Actually had me wondering for half a second, which means it is probably HIGHLY effective at its job of tricking users into installing badware…
What’s interesting to me is the fact that this appeared on an otherwise normal looking blog, suggesting that someone is mass exploiting a hole in some cms or blog platform and targeting sites that have high SERP rankings for certain keywords. Also interesting is the fact that I have the latest Firefox with NoScript and ABP running.
