General Picture of Norsk Politi Institutt for Cybercrime
Norsk Politi Institutt for Cybercrime is one variant targeting norwegians from Reventon family. It is distributed through exploit pages. In such a stealthy way it installs itself, a victim does not know about the infection before it is too late. After the successful installation, the fake warning message is displayed without any gap between logging in and warning screen loading. The same screen may be displayed in safe mode with networking and a blank screen in safe mode if no real-time removal is taken. Here is the page that is the only thing visible:
