Analysis by: Erika Bianca Mendoza
 PLATFORM:

Windows 2000, Windows XP, Windows Server 2003

 OVERALL RISK RATING:
 DAMAGE POTENTIAL:
 DISTRIBUTION POTENTIAL:
 REPORTED INFECTION:

  • Threat Type: Trojan

  • Destructiveness: No

  • Encrypted:

  • In the wild: Yes

  OVERVIEW

This Trojan may be unknowingly downloaded by a user while visiting malicious websites. It may be hosted on a website and run when a user accesses the said website.

This is the Trend Micro detection for files that contain malicious IFRAME tags. Once a user visits an affected Web page, this HTML script launches a hidden IFRAME that connects to a malicious URL.

  TECHNICAL DETAILS

File Size: 4,096 bytes
File Type: HTML, HTM
Memory Resident: No
Initial Samples Received Date: 16 Aug 2011

Arrival Details

This Trojan may be unknowingly downloaded by a user while visiting malicious websites.

It may be hosted on a website and run when a user accesses the said website.

Other Details

This is the Trend Micro detection for files that contain malicious IFRAME tags.

Once a user visits an affected Web page, this HTML script launches a hidden IFRAME that connects to a malicious URL.

NOTES:
The hidden iframe links to the following malicious URL:

  • http://www.{BLOCKED}rm.com/wzandoom.php?tp=4a5accc3be44aa74

Currently, the above-mentioned URL is inaccessible.