Home / malware

PDF

Trojan:JS/Redirector.CC

First posted on 04 March 2010.
Source: SecurityHome

Aliases :

Trojan:JS/Redirector.CC is also known as Trojan.Malscript!html (Symantec), Mal/ObfJS-CM (Sophos), Trojan.JS.Redirector (Ikarus).

Explanation :

Trojan:JS/Redirector.CC is a detection for obfuscated JavaScript contained within Web pages. This JavaScript may be present on a malicious Web site, and is used to redirect users to Web sites other than those of the user's choice.
Top

Trojan:JS/Redirector.CC is a detection for obfuscated JavaScript contained within Web pages. This JavaScript may be present on a malicious Web site, and is used to redirect users to Web sites other than those of the user's choice.

Trojan:JS/Redirector.CC generates dynamic JavaScript code that redirects the browser to a malicious domain of the attacker's choice. In the wild, we observed variations of Trojan:JS/Redirector.CC being used to direct users to the following domains: qghkqfkqdve.com neexhqssgys.com xjhmogzfprb.com google.analytics.com.vgmhlwrixzxz.info

Analysis by Wei Li

Last update 04 March 2010

 

TOP