Home / malware

PDF

Trojan:HTML/Redirector.BL

First posted on 21 February 2013.
Source: Microsoft

Aliases :

Trojan:HTML/Redirector.BL is also known as ScrInject.J (Norman), SQL.Injection (Ikarus), HTML/Framer (AVG).

Explanation :

Installation

Trojan:HTML/Redirector.BL may be detected on your computer if you visit a malicious or compromised webpage.

The trojan is a JavaScript that may be injected into malicious or compromised webpages via SQL injection.



Payload

If you visit a webpage that contains Trojan:HTML/Redirector.BL, your browser may be redirected to another website.

In the wild, we have observed this trojan redirecting web browsers to the URL "statsmy.com/<removed>.php".



Analysis by Wei Li

Last update 21 February 2013

 

TOP