Search
Keyword: JS_PETCH
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. However, as of this writing, the said sites are
DRIDEX. Should the user click on the malicious link that is supposed to be his/her bill, a JS file will then be downloaded. The file infects the user's machine once it's executed. The links are already
A spam campaign called the Love Letter has been discovered by security researchers. It is used in the delivery and distribution of the Nemty ransomware while disguising itself to appear like it is a
While the pandemic continues to affect millions of lives, spammers have continued to use COVID-19 as subject to lure recipients. In a campaign we have observed from March to June 2020, spammers aimed
related to JS_REDIR.GQ
JS_IFRAME.AVX may be downloaded from this site (Infection Vector)
JS_SHELLCOD.SMGU accesses this URL to download JS_EXPLOIT.ADA.
JS_SHELLCOD.SMGU accesses this URL to download JS_EXPLOIT.SM1.
http://sjc1-te-cmsap1.sdi.trendnet.org/dumpImages/294201051312.jpeg Background of the Attack A vulnerability in the Oracle's Java application, Java Deployment Toolkit (JDT), was spotted by two
http://sjc1-te-cmsap1.sdi.trendnet.org/dumpImages/04520105255.jpeg Background of the Attack On January 25, 1:25 p.m., Munich time, Trend Micro analysts received reports regarding a blackhat search
http://SJC1-TE-CMSAP1.sdi.trendnet.org/dumpImages/072201110445.jpeg It is inevitable for vulnerabilities that can be exploited in commercial software to exist. The reasons for this are innumerable
This malicious URL is related to the Osama bin Laden death spam in Facebook as well as the detection JS_FBOOK.VTG.
This site is related to JS_FBOOK.VTG. Users may encounter this when searching for news about Osama bin Laden's death via Facebook .
JS_REDIRECT.BB connects to this possibly malicious URL.
PE_FUJACKS.CT-O connects to this possibly malicious URL.
JS_EXPLOIT.MEA accesses the following websites to download a file, detected as BKDR_POISON.MEA. JS_EXPLOIT.MEA was inserted onto a legitimate website of the US Department of Labor and downloads a
JS_EXPLOIT.MEA loads this site where its component for decoding base64 can be found. This malicious script was inserted onto a legitimate website of the US Department of Labor and downloads a Poison
TROJ_DLDR.HB connects to this URL to download a file and saves it as %System%\logda.dat . This malware is involved in the cyber attacks that targeted specific users in South Korea during March of
JS_DLOADER.SMGA may be downloaded from this site. JS_DLOADER.SMGA exploits a CVE-2012-1875 vulnerability in Internet Explorer .
JS_DLOADER.SMGA connects to this site to download a malicious file detected as BKDR_AGENT.BCSG. JS_DLOADER.SMGA exploits a CVE-2012-1875 vulnerability.