Tom Kelcher over at the Sunbelt Software blog has a great post up that shows how quickly some of these malware delivering rogue security programs clone themselves into new products.

Leading the charge is the third generation of WiniGuard that apparently is seeing new clones of it launching every 48 hours.

A new rogue security product called IGuardPC, that we added to detections today, is the 50th clone of the WiniGuard family of rogue security products. That makes WiniGuard the largest rogue family ever detected by Sunbelt researchers.
The WiniGuard family began in September of 2008. Operators behind it have added variants that our researcher Patrick has sorted into three generations. The latest generation gets a new clone about every 48 hours to stay ahead of public awareness and anti-malware detections. Most of them are being caught by existing VIPRE detections.

Continue reading Just how fast do those rogue security products mutate »