http://{BLOCKED}.236.35

June 16, 2013

• Email
• Facebook
• 
  Twitter
• Google+
• Linkedin

 Analysis by: Clarisa Joyce Velasco

---

 URL BLOCKING DATE/TIME: 16 Jun 2013 02:00:00 PM GMT-8

 RATING: HIGH

 DOMAIN: 60.239.236.35

 CATEGORY: Disease Vector

 DESCRIPTION:

TSPY_QHOST.QFB redirects users to this URL when users visit various Korean banks. The malware uses BAT_QHOST.QFB to modify an infected system’s HOST files.

Related Malware

• BAT_QHOST.QFB
• TSPY_QHOST.QFB