http://{BLOCKED}overs.ru/sexy/files/build.exe

June 16, 2013
 Analysis by: Clarisa Joyce Velasco
 URL BLOCKING DATE/TIME: 21 May 2013 06:15:00 PM GMT-8
 RATING: HIGH
 DOMAIN: radiolovers.ru
 CATEGORY: Disease Vector
 DESCRIPTION:

WORM_ZBOT.GJ connects to this website to download and execute a malicious file. This worm attempts to steal sensitive online banking information, such as user names and passwords. WORM_ZBOT.GJ is notable for its autoupdate and self-propagation routines.

Related Malware