Home / malware Trojan:JS/IframeRef.K
First posted on 28 March 2013.
Source: MicrosoftAliases :
Trojan:JS/IframeRef.K is also known as Mal/Iframe-AL (Sophos).
Explanation :
Trojan:JS/IframeRef.K is a specially formed IFrame tag that points to websites containing malicious content, for example malicious JavaScript that exploits a specific vulnerability.
In the wild , Trojant:JS/IframeRef.K redirects browsers to certain URLs in the following servers:
- 129.121.133.150
- 149.47.243.178
- 157.14.29.12
- 173.233.134.145
- 178.73.226.20
- 193.235.141.4
- 199.204.209.178
- 209.126.248.211
- 64.247.184.248
- 65.39.246.9
- 65.75.175.62
- 69.89.4.114
- 69.90.113.92
- 80.248.238.222
These servers cannot be reached as of this writing.
Analysis by Horea Coroiu
Last update 28 March 2013