Threat Level: green Handler on Duty: Russ McRee

SANS ISC: Java Trojan/Bot SANS ISC InfoSec Forums

Participate: Learn more about our honeypot network
https://isc.sans.edu/honeypot.html

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Java Trojan/Bot
Jan sent us a nice trojan he found on a friend's defaced website. After 20 seconds, the defaced site will redirect users to the java applet which appears to implement a full featured bot. You should see a java security popup notifying you that the applet is signed by an "Unknown User". As always, do not click 'OK' but deny.

Given that it is written in Java, this bot could potentially work on different operating systems.

Johannes

3913 Posts
ISC Handler
Oct 13th 2006

Sign Up for Free or Log In to start participating in the conversation!