Fake Avast Renewal Pages Harvest Details for Follow-Up Scams

Malwarebytes says scammers are using polished, apparently AI-assisted pages to support antivirus renewal scams. The messages claim a subscription has renewed and direct recipients to a cancellation page, even though no payment or subscription exists. The pages collect names, email addresses and phone numbers, which can then be used to make follow-up calls posing as support staff. Callers may try to persuade victims to install remote-access software or “reverse” a payment that never happened.

During scam-hunting activity, Malwarebytes found a fake Avast page aimed at users in Belgium. Written in French, it claimed that an Avast Premium Security subscription covering five devices had renewed for €129.99 and would renew again the following February. The page used Avast branding without permission and presented a professional-looking summary, but was not connected to Avast.

Researchers found polite French notes in the code apparently explaining unfinished form functionality, unused styling and other signs of incomplete development. These details are consistent with AI-assisted creation, but Malwarebytes says AI involvement cannot be proved from the files alone.

The discovered form did not actually transmit submitted information, suggesting the page was unfinished or a template awaiting further development. Malwarebytes advises checking bank or card statements and verifying subscriptions through an organisation’s official app or website, rather than using message links. Anyone receiving a follow-up call should not install remote-access software.

If it has already been installed, disconnect the device from the internet, remove it and change passwords from another device; people who shared card details or sent money should contact their bank immediately.