Search
Keyword: HTML_ADODB
macro detected by Trend Micro as W2KM_DRIDEX.YYSQJ and W2KM_DRIDEX.SQA respectively. DRIDEX is one of the prevalent online banking malware that sports various information theft routines such as HTML
Subject: Fake Letter-Response email with DRIDEX attachment DRIDEX is a notorious online banking malware that performs a plethora of information theft routines such as form-grabbing, HTML injections,
message content itself is its use of a spam technique called HTML inserts - it abuses HMTL tags to insert random words that when grouped together have no meaning. Clicking on the link leads to the download
view a PDF copy of his/her personal invoice. Under the guise of the links are ransomware-related URLs that can infect machines. Some variants of this spam also come with malicious HTML attachments.
This malicious URL hosts the malware TROJ_DLOAD.VAC.
When accessed, this malicious URL downloads a file that is detected as TROJ_SMALL.NSZ.
HTML_REDIR.MC redirects users to this site.
JS_REDIRECTOR.FX redirects users to this URL.
JS_REDIR.FU redirects users to this URL.
HTML_REDIR.FH redirects browsers to this site.
JS_REDIR.SMAL connects to this malicious URL.