Home / malware

PDF

Trojan:JS/Redirector.JK

First posted on 17 May 2012.
Source: Microsoft

Aliases :

Trojan:JS/Redirector.JK is also known as JS/iFrame.GA.1 (Avira), JS.IFrame.253 (Dr.Web).

Explanation :

Trojan:JS/Redirector.JK is the detection for an obfuscated JavaScript embedded in webpages that may have been hacked, or in specially-crafted webpages created by attackers.

When you visit a webpage containing this JavaScript, it runs and generates a hidden IFrame, which tries to redirect the browser to another website that may have other malware.

In the wild, Trojan:JS/Redirector.JK has been observed redirecting browsers to the website "ifr3ts.r.gd".



Analysis by Wei Li

Last update 17 May 2012

 

TOP