Home / malware

PDF

Trojan:JS/Iframe.AE

First posted on 16 February 2012.
Source: Microsoft

Aliases :

Trojan:JS/Iframe.AE is also known as JS/iFrame.aai.1 (Avira), Trojan.Iframe.AAI (BitDefender), Trojan.IframeRef (Ikarus).

Explanation :

Trojan:JS/Iframe.AE is a malicious JavaScript file that is embedded into malicious or compromised webpages, usually via SQL injection or through Blackhat search engine optimization (SEO) poisoning.


Top

Trojan:JS/Iframe.AE is a malicious JavaScript file that is embedded into malicious or compromised webpages, usually via SQL injection or through Blackhat search engine optimization (SEO) poisoning.

If a user visits a website that contains this malicious JavaScript, it redirects them to another website that may download other malware into the computer.



Payload

Redirection

In the wild, a webpage that contains Trojan:JS/Iframe.AE may redirect to any of the following URLs:

• google-ad<removed>.com
• dragos<removed>ort.com

Analysis by Patrick Estavillo

Last update 16 February 2012

 

TOP