Fake 'Security Checkup in Progress' virus pop-up linked to redstarstory.shop pushes antivirus via affiliate redirect

What happened

MalwareTips reports a Security Checkup in Progress pop-up scam that displays a supposed scan, then claims a virus was found and system protection is switched off, and asks whether the visitor wants to resolve the problems. MalwareTips says the reported campaign has been associated with redstarstory.shop. A reported version redirected to McAfee's official website, which MalwareTips describes as deceptive promotion likely aimed at affiliate commissions; McAfee is not accused of operating the warning. MalwareTips notes the redirect was not reproduced as a current purchase and no infection was confirmed.

How the scam works

MalwareTips describes a pop-up that starts a check you didn't ask for, shows simple results that make the problem easy to understand, and then chooses the fix for you. A fake scan reports that a virus was found and protection is switched off, and the visitor is asked whether to resolve the problems. The fix button decides which product or destination you reach.

MalwareTips says the reported campaign has been associated with redstarstory.shop. A version redirected to McAfee's official website, which it describes as deceptive promotion likely aimed at affiliate commissions: the purchase would be of a real product, but under a false alarm. McAfee is not accused of operating the warning. It did not reproduce the redirect as a current purchase and no infection was confirmed.

If you bought because of the alert, check the receipt and renewal terms in the vendor's account and ask for cancellation or a refund, describing the circumstances accurately. A scan can't retrieve information already copied, so change passwords and tell your card provider if payment details went to an untrusted form.

Source

MalwareTips, "Security Checkup In Progress Scam: Fake Virus Results Push Software Sales" (published 26 October 2026).