How to identify scams promoted abusing the azurestaticapps.net service

What is Azure Web Apps?

Azure Web Apps (aka Azure Static Web Apps) – azurestaticapps.net – is a legitimate cloud computing based platform that is part of the Microsoft Azure computer services group. Essentially, Azure Web Apps offers Web hosting services.

This platform has been abused by cyber criminals to host deceptive and malicious content. There have been numerous instances of online scams imitating content affiliated with Microsoft, Apple, Google, and other genuine entities – hosted through Azure Web Apps.

It must be emphasized that the dangerous sites hosted via this service are in no way associated with it or any other services and products offered by the Microsoft Corporation.

Azure Web Apps service abuse overview

Part of the Microsoft Azure cloud computing services, Azure Web Apps is a platform for hosting websites. This service automatically deploys full stack web apps from repositories, such as Azure DevOps and GitHub. Azure Web Apps offer a variety of features, but the core function is hosting static content like CSS, HTML, JavaScript, and images on the Web.

As mentioned in the introduction, the Azure Web Apps platform has been noted being abused by scammers to host deceptive and harmful websites. Most commonly, the service is leveraged for technical support scam sites.

For example, Azure Web Apps have been used to promote "Threats Detected:Stuxnet", "Ads.financetrack(1).exe", "Apple Defender Security Center", "Access to this pc has been blocked for security reasons", and countless other schemes.

This type of scam often mimics legitimate websites (e.g., Microsoft's official site, etc.). The imitator pages perform bogus system scans and alert visitors of fake threats detected on their devices. Tech support scams aim to trick victims into calling fake support lines and allowing scammers to access their computers remotely.

Detailed information on how to recognize these scams, their mode of operation, potential threats, and what to do if you have fallen victim to such a scheme – can be found in our article on technical support scams.

However, the Azure Web Apps could be abused to host other types of scam sites. While the appearance and mechanisms utilized can differ drastically, the end goal of online schemes is the same – to generate revenue at victims' expense.

By leveraging a reputable service, cyber criminals can create an incredible impression of legitimacy. Even if suspicious or outright harmful content is hosted for a brief period of time – criminals can deem it profitable enough to continue attempting to exploit a genuine service.

Due to how prevalent scams are on the Internet – we strongly recommend exercising caution when browsing.

Threat Summary:

Name	azurestaticapps.net scam websites
Threat Type	Phishing, Scam, Social Engineering, Fraud
Symptoms	Fake error messages, fake system warnings, pop-up errors, hoax computer scan.
Distribution methods	Compromised websites, rogue online pop-up ads, potentially unwanted applications.
Damage	Loss of sensitive private information, monetary loss, identity theft, possible malware infections.
Malware Removal (Windows)	To eliminate possible malware infections, scan your computer with legitimate antivirus software. Our security researchers recommend using Combo Cleaner. ▼ Download Combo Cleaner To use full-featured product, you have to purchase a license for Combo Cleaner. 7 days free trial available. Combo Cleaner is owned and operated by Rcs Lt, the parent company of PCRisk.com read more.

Abuse of legitimate service overview

Cyber criminals commonly exploit genuine services and products for a variety of nefarious activities. Doing so can craft an appearance of legitimacy and give credence to scams. Graphical details of existing products and services can be used as disguises as well.

To expand upon this, "Azure Web Apps" was initially named "Microsoft Azure Web Sites". Hence, some schemes bore the azurewebsites.net subdomain; we have written about this in our Microsoft Azure Web Sites article. We have also written on the Amazon AWS services that have been similarly abused.

As previously mentioned, technical support scams are often hosted via the Azure Web Apps platform. These schemes rely on victims' granting scammers remote access to their devices. In many cases, the access is facilitated using legitimate software like UltraViewer and TeamViewer.

What is more, cyber criminals can trojanize popular programs. In other words, the software can be tampered with in order to infect systems with trojans, ransomware, and other malware.

Hence, always research programs before downloading or purchasing, and acquire them only from official/verified sources.

How did I open a scam hosted through azurestaticapps.net?

Scam sites are rarely accessed intentionally; these pages are often force-opened, or visitors are lured into them through various social engineering techniques.

In general, online scams are promoted via webpages that utilize rogue advertising networks, spam (e.g., emails, SMSes, DMs/PMs, social media/ forum posts, browser notifications, etc.), malvertising (intrusive advertisements), typosquatting (misspelled URLs), and adware.

How to avoid visiting scam websites?

Caution is key to online safety. Therefore, take note of URLs and enter them carefully. Be wary of ads and other online content making threatening claims or offers that sound too good to be true. Do not permit suspicious pages to deliver browser notifications; instead, ignore or deny these requests (i.e., click "Block", "Block Notifications", etc.).

Do not use sites offering pirated programs/media or other questionable services (e.g., Torrenting, illegal streaming/downloading, etc.), as these webpages are usually monetized via rogue advertising networks. Exercise caution with incoming emails and other messages; do not open attachments or links found in dubious mail.

Download only from official/trustworthy sources and approach installations carefully (e.g., study terms and options, use "Custom/Advanced" settings, and opt out of additional apps, extensions, etc.) – to prevent bundled/hazardous software from infiltrating the system.

If your computer is already infected, we recommend running a scan with Combo Cleaner Antivirus for Windows to automatically eliminate all threats.

Appearance of a scam hosted via Azure Web Apps (GIF):

Instant automatic malware removal: Manual threat removal might be a lengthy and complicated process that requires advanced IT skills. Combo Cleaner is a professional automatic malware removal tool that is recommended to get rid of malware. Download it by clicking the button below:
▼ DOWNLOAD Combo Cleaner By downloading any software listed on this website you agree to our Privacy Policy and Terms of Use. To use full-featured product, you have to purchase a license for Combo Cleaner. 7 days free trial available. Combo Cleaner is owned and operated by Rcs Lt, the parent company of PCRisk.com read more.

Quick menu:

• What is azurestaticapps.net scam websites?
• How to identify a pop-up scam?
• How do pop-up scams work?
• How to remove fake pop-ups?
• How to prevent fake pop-ups?
• What to do if you fell for a pop-up scam?

How to identify a pop-up scam?

Pop-up windows with various fake messages are a common type of lures cybercriminals use. They collect sensitive personal data, trick Internet users into calling fake tech support numbers, subscribe to useless online services, invest in shady cryptocurrency schemes, etc.

While in the majority of cases these pop-ups don't infect users' devices with malware, they can cause direct monetary loss or could result in identity theft.

Cybercriminals strive to create their rogue pop-up windows to look trustworthy, however, scams typically have the following characteristics:

• Spelling mistakes and non-professional images - Closely inspect the information displayed in a pop-up. Spelling mistakes and unprofessional images could be a sign of a scam.
• Sense of urgency - Countdown timer with a couple of minutes on it, asking you to enter your personal information or subscribe to some online service.
• Statements that you won something - If you haven't participated in a lottery, online competition, etc., and you see a pop-up window stating that you won.
• Computer or mobile device scan - A pop-up window that scans your device and informs of detected issues - is undoubtedly a scam; webpages cannot perform such actions.
• Exclusivity - Pop-up windows stating that only you are given secret access to a financial scheme that can quickly make you rich.

Example of a pop-up scam:

How do pop-up scams work?

Cybercriminals and deceptive marketers usually use various advertising networks, search engine poisoning techniques, and shady websites to generate traffic to their pop-ups. Users land on their online lures after clicking on fake download buttons, using a torrent website, or simply clicking on an Internet search engine result.

Based on users' location and device information, they are presented with a scam pop-up. Lures presented in such pop-ups range from get-rich-quick schemes to fake virus scans.

How to remove fake pop-ups?

In most cases, pop-up scams do not infect users' devices with malware. If you encountered a scam pop-up, simply closing it should be enough. In some cases scam, pop-ups may be hard to close; in such cases - close your Internet browser and restart it.

In extremely rare cases, you might need to reset your Internet browser. For this, use our instructions explaining how to reset Internet browser settings.

How to prevent fake pop-ups?

To prevent seeing pop-up scams, you should visit only reputable websites. Torrent, Crack, free online movie streaming, YouTube video download, and other websites of similar reputation commonly redirect Internet users to pop-up scams.

To minimize the risk of encountering pop-up scams, you should keep your Internet browsers up-to-date and use reputable anti-malware application. For this purpose, we recommend Combo Cleaner Antivirus for Windows.

What to do if you fell for a pop-up scam?

This depends on the type of scam that you fell for. Most commonly, pop-up scams try to trick users into sending money, giving away personal information, or giving access to one's device.

• If you sent money to scammers: You should contact your financial institution and explain that you were scammed. If informed promptly, there's a chance to get your money back.
• If you gave away your personal information: You should change your passwords and enable two-factor authentication in all online services that you use. Visit Federal Trade Commission to report identity theft and get personalized recovery steps.
• If you let scammers connect to your device: You should scan your computer with reputable anti-malware (we recommend Combo Cleaner Antivirus for Windows) - cyber criminals could have planted trojans, keyloggers, and other malware, don't use your computer until removing possible threats.
• Help other Internet users: report Internet scams to Federal Trade Commission.

Frequently Asked Questions (FAQ)

What is a pop-up scam?

Pop-up scams are deceptive messages intended to trick users into performing specific actions. For example, victims can be tricked into calling fake support lines, allowing cyber criminals to access devices remotely, sending money to scammers, providing sensitive information, buying products, downloading/installing software, subscribing to services, and so forth.

What is the purpose of a pop-up scam?

The purpose of pop-up scams is to generate revenue for scammers. Profit can be made by acquiring funds through deception, promoting content (e.g., websites, software, products, services, etc.), selling/abusing private data, and proliferating malware.

Why do I encounter fake pop-ups?

Pop-up scams are most commonly promoted via malvertising, websites using rogue advertising networks, spam (e.g., emails, DMs/PMs, social media posts, browser notifications, etc.), typosquatting, and adware.

I cannot exit a scam page, how do I close it?

If you cannot close a scam page – end the browser's process using Task Manager. Remember to start a new browsing session when relaunching the browser, as the previous one includes the deceptive website.

I have allowed cyber criminals to remotely access my computer, what should I do?

If you have allowed cyber criminals to remotely access your computer – you must first disconnect it from the Internet. Afterward, uninstall the remote access program used, as the criminals might not need your permission to reconnect. Lastly, perform a complete system scan with an anti-virus and eliminate all threats.

I have provided my personal information when tricked by a pop-up scam, what should I do?

If you have provided your log-in credentials – change the passwords of all potentially exposed accounts and inform their official support without delay. And if you've disclosed other private information (e.g., ID card details, passport photos/scans, credit/debit card numbers, etc.) – immediately contact the appropriate authorities.

Will Combo Cleaner protect me from pop-up scams and the malware they proliferate?

Combo Cleaner is designed to detect and eliminate all kinds of threats. It can scan visited websites for deceptive/malicious content and restrict further access to such pages. Combo Cleaner is capable of detecting and removing almost all known malware infections. Keep in mind that running a full system scan is essential since sophisticated malicious software usually hides deep within systems.

▼ Show Discussion