Home / malware

PDF

Trojan:JS/Hufysk.A

First posted on 24 May 2012.
Source: Microsoft

Aliases :

There are no other names known for Trojan:JS/Hufysk.A.

Explanation :

Trojan:JS/Hufysk.A is a malicious Chrome browser plugin that poses as an Adobe Flash Player plugin.

When installed, it runs every time Chrome is run. It inserts an obfuscated JavaScript that fetches and runs malicious code from a remote server. One server it is known to connect to is "kmi19.hk".

At the time of this writeup, the server contains another JavaScrip detected as Worm:JS/Hooface.A, which spams your Facebook friends with links. It also steals Yahoo! user names and passwords if you access any Yahoo!-related website.



Analysis by Vincent Tiu

Last update 24 May 2012

 

TOP