Threat Level: green Handler on Duty: Rob VandenBrink

SANS ISC InfoSec Handlers Diary Blog


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

Java Trojan/Bot

Published: 2006-10-13
Last Updated: 2006-10-13 18:49:37 UTC
by Johannes Ullrich (Version: 1)
0 comment(s)
Jan sent us a nice trojan he found on a friend's defaced website. After 20 seconds, the defaced site will redirect users to the java applet which appears to implement a full featured bot. You should see a java security popup notifying you that the applet is signed by an "Unknown User". As always, do not click 'OK' but deny.

Given that it is written in Java, this bot could potentially work on different operating systems.

Keywords:
0 comment(s)
Diary Archives