Home / malware Trojan:JS/Redirector.JN
First posted on 19 May 2012.
Source: MicrosoftAliases :
Trojan:JS/Redirector.JN is also known as JS/Exploit-Blacole.bn (McAfee), JS/Crypted.Y (Command), JS.Redirector.Gen.23 (VirusBuster), JS/Redirector.PB.9 (Avira), JS:Trojan.JS.Redirector.AQ (BitDefender).
Explanation :
Trojan:JS/Redirector.JN is an obfuscated JavaScript file found in hacked or malicious webpages.
When run, it generates a hidden IFrame that tries to redirect your web browser to another website containing malicious content.
In the wild, Trojan:JS/Redirector.JK has been observed redirecting browsers to the following URL:
- xxxtpifhkv.from-wv.com
- kvwdnpumvw.blogdns.com
- enlweawvco.homedns.org
Analysis by Jaime Wong
Last update 19 May 2012