Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: InfoSec Handlers Diary Blog - And the Oscar goes to... InfoSec Handlers Diary Blog


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

And the Oscar goes to...

Published: 2009-02-23
Last Updated: 2009-02-23 17:14:39 UTC
by Daniel Wesemann (Version: 2)
0 comment(s)

ISC reader Gary wrote in to let us know that searching for "oscar presenters" and "oscar winners" with Google brings up a prominently ranked result on a web server in Poland, on a subdomain of "bee<dot>pl", which - surprise, surprise - includes a malicious JavaScript.  The end result currently seems to reside on stabilitytraceweb<dot>com, and is yet another incarnation of the "Fake Anti-Virus Program" malware that we have covered repeatedly.  Watch out, the EXE has a meager 6/39 on Virustotal.

Keywords: malware
0 comment(s)
Diary Archives