Thứ Bảy, 8 tháng 1, 2011

RapidSwitch, fake movies and a browser hijack

Whilst investigating a site earlier, I stumbled upon a site claiming to be a vanilla porn site. Not surprisingly, it turned out to be slightly more than that.This site offers its victims the usual player you're used to seeing on the likes of YouTube - with a major difference. Instead of the fake codec, or actual video, an HTA is downloaded and executed, that contains;

Không có nhận xét nào:

Đăng nhận xét