Home / malwarePDF  

Trojan:JS/IframeRef.K


First posted on 28 March 2013.
Source: Microsoft

Aliases :

Trojan:JS/IframeRef.K is also known as Mal/Iframe-AL (Sophos).

Explanation :



Trojan:JS/IframeRef.K is a specially formed IFrame tag that points to websites containing malicious content, for example malicious JavaScript that exploits a specific vulnerability.

In the wild , Trojant:JS/IframeRef.K redirects browsers to certain URLs in the following servers:

  • 129.121.133.150
  • 149.47.243.178
  • 157.14.29.12
  • 173.233.134.145
  • 178.73.226.20
  • 193.235.141.4
  • 199.204.209.178
  • 209.126.248.211
  • 64.247.184.248
  • 65.39.246.9
  • 65.75.175.62
  • 69.89.4.114
  • 69.90.113.92
  • 80.248.238.222


These servers cannot be reached as of this writing.



Analysis by Horea Coroiu

Last update 28 March 2013

 

TOP