Web surfers have been duped into purchasing fake online security software that actually facilitates the installation of malicious code.