Home / malwarePDF  

Trojan:JS/Redirector.JN


First posted on 19 May 2012.
Source: Microsoft

Aliases :

Trojan:JS/Redirector.JN is also known as JS/Exploit-Blacole.bn (McAfee), JS/Crypted.Y (Command), JS.Redirector.Gen.23 (VirusBuster), JS/Redirector.PB.9 (Avira), JS:Trojan.JS.Redirector.AQ (BitDefender).

Explanation :



Trojan:JS/Redirector.JN is an obfuscated JavaScript file found in hacked or malicious webpages.

When run, it generates a hidden IFrame that tries to redirect your web browser to another website containing malicious content.

In the wild, Trojan:JS/Redirector.JK has been observed redirecting browsers to the following URL:

  • xxxtpifhkv.from-wv.com
  • kvwdnpumvw.blogdns.com
  • enlweawvco.homedns.org




Analysis by Jaime Wong

Last update 19 May 2012

 

TOP