Search

does the following: It executes the downloaded code from the URL using powershell. However, as of this writing, the said sites are inaccessible. Trojan-Downloader.MSWord.Agent.asdfye (Kaspersky);

does the following: It executes the downloaded code from the URL using powershell. However, as of this writing, the said sites are inaccessible. Exploit:O97M/DDEDownloader.C (Microsoft);

of the loader variables maybe located in the website or URL hosting this SWF. Exploit:SWF/Axpergle.I (Microsoft) Downloaded from the Internet

malware/grayware or malicious users. NOTES: This malware tricks users to click on the link to view the PDF: Upon clicking the link, it accesses the URL http://{BLOCKED}onsultores.com/admin/img/adobe.php . The user

of the loader variables maybe located in the website or URL hosting this SWF. Exploit:SWF/Axpergle.D (Microsoft) Downloaded from the Internet

Routine This Trojan downloads a possibly malicious file from a certain URL. The URL where this malware downloads the said file depends on the following parameter(s) passed on to it by its components:

user accesses certain websites where it is hosted. Download Routine This Trojan downloads a possibly malicious file from a certain URL. The URL where this malware downloads the said file depends on the

}sparks.ph/images/bitspace_logo/logosncircles/logocircle.php http://{blocked}cechk.ru/secure.login/waw/mbna/ It does the following: When users click the link on the PDF file, it accesses the said URL which is a phishing site, asking to fill out data to be

}owtie.ru/system/logs/wp-verify.php It does the following: When users click the link on the PDF file, it accesses the said URL which is a phishing site, asking to fill out data to be stolen. Via email Steals information

URL: http://cc.{blocked}dd.net/1.js It does the following: This script redirects the user to the said URL which contains advertisements that may be displayed on the user's browser.

user to the following URL either to steal credentials or download other files: accountmanagement1.box.com/{BLOCKED}/{BLOCKED}yaih33fpa7hqszrkpv15bqg5fq accountmanagement1.app.box.com/{BLOCKED}/{BLOCKED

possibly malicious URL in a web browser: https://c{BLOCKED}s.com/ipfs/bafkreiddros3nljwt5yor2q4bbelatvkn3aeygsjicq2heap63hdvffszu#n-k{BLOCKED}.jp It redirects the web browser to the following URL:

file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Other Details This Backdoor does the following: This backdoor connects to the following URL to

file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Other Details This Trojan does the following: It connects the user to the possibly malicious URL

Characters} FaviconURL = http://{BLOCKED}s.{BLOCKED}p.it/p/97238/wow_ico.png HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Internet Explorer\SearchScopes\{Random Characters} URL = http://{BLOCKED}w.{BLOCKED}p.it/?q=

Number Control URL It will then access the control URL of the router depending on the discovered UPnP device: http://{control URL}/index.asp http://{control URL}/dlink/hwiz.html http://{control URL

Ransomware-related URLs are being sent via spam emails by posing as fake Dropbox links. The ruse makes the malicious URL hard to see, and uses the popularity of Dropbox to fool victims. Apart from

is a Java class file that is used to execute an exploit code. Once successful, it may download and execute a possibly malicious file from a certain URL. The URL where this malware downloads the said

malicious routines. Based from its code, this Java Class has the following capabilities: Download and execute files from a URL specified by another Class. Modify Java Security Settings

is a Java class file that is used to execute an exploit code. Once successful, it may download and execute a possibly malicious file from a certain URL. The URL where this malware downloads the said