Home / malware

PDF

Exploit:JS/Phoex.B

First posted on 18 April 2020.
Source: Microsoft

Aliases :

There are no other names known for Exploit:JS/Phoex.B.

Explanation :

Exploit:JS/Phoex.B is a JavaScript that exploits the vulnerability in Java Runtime Environment (JRE) discussed in CVE-2010-4452. Once a malformed Java applet, containing the JavaScript, is opened by vulnerable versions of Java, the script executes to download and execute arbitrary files from the following URL:

kipoldddr@1319073506:8080/dir/ter

As of this writing, the URL is no longer accessible.

Analysis by Alden Pornasdoro

Last update 18 April 2020

 

TOP