Search
Keyword: browser hijacker
timed events that load a deeply nested XML file, followed by redirecting the browser to another page, which leads to a concurrency failure that causes structures to be freed incorrectly, as demonstrated
Please refer to the filter number and filter name when applying appropriate DPI and/or IDF rules. 1003670| 1003670 - Multiple Browser Certificate Regexp Parsing Heap Overflow
other personal and confidential information Scans for camera drivers and installs plugin to secretly record the user Captures screenshots and logs keystrokes Steals Internet browser credentials Performs
file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Installation This Trojan drops the following files: {Default browser save path}\Market
its DLL components Browser data to search for Cryptowallets of interest Downloaded from the Internet, Dropped by other malware Connects to URLs/IPs, Steals information
}iew.com/wp-content/themes/twentythirteen/you/dhl1.php Other Details This Trojan does the following: It disguises itself as a login page to lure the user into submitting the login credentials to a malicious link: It redirects the browser to the
\Explorer\ Browser Helper Objects\{9A4DDA61-1D3A-49B7-9849-DAC6CD30A393} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows\CurrentVersion\Explorer\ Browser Helper Objects\{0EE16FA9-E135-43B5-8236-A0CC75F60BB6}
\Explorer\ Browser Helper Objects\{9A4DDA61-1D3A-49B7-9849-DAC6CD30A393} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows\CurrentVersion\Explorer\ Browser Helper Objects\{0EE16FA9-E135-43B5-8236-A0CC75F60BB6}
CVE-2009-1692 WebKit before r41741, as used in Apple iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Safari, and other software, allows remote attackers to cause a denial of
\Mozilla Firefox\updated\browser\blocklist.xml %System Root%\Email and Password List.vbs %System Root%\Program Files\Microsoft Office\Office12\1033\Mso Example Intl Setup File B.txt %System Root%\Program
automatic execution every time Internet Explorer is used by adding the following registry keys: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows\CurrentVersion\Explorer\ Browser Helper Objects\
" HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows\CurrentVersion\Run WhenUSearchWHSE = "%Program Files%\WhenUSearch\whse.exe" It adds the following registry keys to install itself as a Browser Helper Object (BHO):
such as user names, passwords, and hostnames from the following browsers: 360Browser 7Star Amigo Brave Bromium CentBrowser Chedot Chromium CocCoc Comodo Cyberfox Elements Browser Epic Privacy Browser Go!
gathers the following data: Browser cookies Flash cookies FTP, POP3, IMAP, SMTP, HTTPMail, NNTP Passwords GeoIP locations Internet sessions Login credentials for certain websites Network information Outlook
\WebDataCopy %AppDataLocal%\CentBrowser\User Data\Default\LoginDataCopy %AppDataLocal%\CentBrowser\User Data\Default\CookiesCopy %AppDataLocal%\CocCoc\Browser\User Data\Default\WebDataCopy %All Users Profile%
\Browser\User Data\Default\WebDataCopy %AppDataLocal%\Slimjet\User Data\Default\CookiesCopy %AppDataLocal%\Comodo\Dragon\User Data\Default\CookiesCopy %AppDataLocal%\CentBrowser\User Data\Default\WebDataCopy
%AppDataLocal%\Chromium\User Data\Profile 3\CookiesCopy %AppDataLocal%\Vivaldi\User Data\Default\WebDataCopy %AppDataLocal%\CocCoc\Browser\User Data\Default\WebDataCopy %Application Data%\brave\CookiesCopy
\Chromium\User Data\Default\WebDataCopy %AppDataLocal%\Google\Chrome\User Data\Profile 1\LoginDataCopy %All Users Profile%\D747UGavof6t3\Files\Files\Desktop\note.txt %AppDataLocal%\CocCoc\Browser\User Data
time Internet Explorer is used by adding the following registry keys: HKEY_LOCAL_MACHINE\Software\Microsoft\ Windows\CurrentVersion\explorer\ Browser Helper Objects\{D40D01E4-0378-430A-A890-382CB46B97B1}
time Internet Explorer is used by adding the following registry keys: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows\CurrentVersion\Explorer\ Browser Helper Objects\{74217938-21EC-40DA-B7AC-AB814F476C57}