TOKYO (MacHouse) – You can find Beacon University’s website at http://beacon.edu. (See Screenshot 01.) According to its website, Beacon University was originally founded in 1975 and continues to serves as a place for biblical studies.
Two weeks ago, Beacon University’s various sites were exploited for redirection to a fake antivirus scan website at antivirus-scanner.com. One redirection point was established at Beacon University’s online store. It’s located at https://buy.beacon.edu/institute/ with a security layer. (See Screenshot 02.) They use osCommerce’s free PHP software to sell books and more online. In fact, using their contact form at Beacon’s online store (See Screenshot 03.), I sent a kind notification to remind them that various websites of theirs were exploited for redirection to a fake antivirus scan website. Sadly, they have decided to ignore my kind advice or at least haven’t bothered to look for ill files. Consequently, redirection points, which were once used for antivirus-scanner.com, now have been converted into ones for antivirus-scanonline.com.
 Screenshot 01 – Source: beacon.edu |
 Screenshot 02 – Source: beacon.edu |
 Screenshot 03 – Source: beacon.edu |
More than 2 weeks ago, a cyber scum group started to circulate spam comments to advertised the websites that were used as redirection points for the fake anti-virus scan website at antivirus-scanner.com. One recognizable signature for this exploitation was ?stmp. (See Screenshot 04.) If you access a URL used for redirection to antivirus-scanner.com, you can now be redirected to the website of antivirus-scanonline.com.
 Screenshot 04 – Source: beacon.edu |
 Screenshot 05 – Source: MacHouse |
 Screenshot 06 – Source: beacon.edu |
Click on the button to watch a documentation video. 
Click on the button to watch more documentation videos.
References:
ANTIVIRUS-SCANONLINE.COM: Response to a Comment at FORUMS.SLICKDEALS.NET
The Name of A Next Anti-Virus Scan Domain Will Be…
File Determined to Contain Troj/FakeVir-BF
Lehigh University’s Multiple Department Websites Exploited for Redirection to ANTIVIRUS-SCANONLINE.COM
ANTIVIRUS-SCANONLINE.COM: 15 Websites Victimized in the Latest ‘?prj’ Exploitation Scheme
Warning: A New Fake Anti-Virus Scan Website Discovered
The Official Website of British Band Camera Obscura Exploited for Fake Anti-Virus Scan
Sitemap Hack, ANTIVIRUS-SCANNER.COM Invading At Least 10 Websites Including Arizona State University’s Site
ANTIVIRUS-SCANNER.COM and Troj/Dwnldr-HDG
Warning: A New Hack Scheme Discovered Involving Anti-Virus Scan Website
