Home / malware

PDF

Trojan:Win32/Brudia.C

First posted on 15 March 2012.
Source: Microsoft

Aliases :

There are no other names known for Trojan:Win32/Brudia.C.

Explanation :

Trojan:Win32/Brudia.C is a trojan that attempts to trick the user into directing traffic to a specified webpage in exchange for QQ - a popular instant messaging tool - credits.


Top

Trojan:Win32/Brudia.C is a trojan that attempts to trick the user into directing traffic to a specified webpage in exchange for QQ - a popular instant messaging tool - credits.



Installation

An affected user may download this trojan electively from the Internet thinking that they can get QQ credit to access paid-functionality.



Payload

Tricks the user into providing personal details and email addresses

Upon installation, the trojan displays a webform, as seen in the image below:



To activate their account to get credit to access the paid-functionality in QQ, the user is asked to fill in their details.

Once the user has completed the webform, they are redirected to the following advertising website:

bjbdl.info

To complete the activation process, the user is required to send a link to the advertising website to 50 friends; however, upon doing so, the user does not receive any credits.



Analysis by Fang Fang

Last update 15 March 2012

 

TOP