'1969 Rybovich' Madoff's Yacht - Search Leads to Fake Anti-Virus and Malware

Discussion in 'malware problems & news' started by PROROOTECT, May 28, 2009.

Thread Status:
Not open for further replies.
  1. PROROOTECT

    PROROOTECT Registered Member

    Joined:
    May 5, 2008
    Posts:
    1,102
    Location:
    HERE ...Fort Lee, NJ
  2. Rmus

    Rmus Exploit Analyst

    Joined:
    Mar 16, 2005
    Posts:
    4,020
    Location:
    California
    From the blog:

    From the example the blog shows -- a typical rogue antivirus fake scan -- anyone who has properly configured the browser for scripting won't see anything but a blank page:

    [​IMG]

    This is because the elements of the fake scanning are loaded by javascript files. Typically:

    Code:
    script src='fileslist.js'>/script
    script src='progressbar2.js?v=1.1'>/script
    script src='common.js'>/script
    
    For a research blog, not much research was done.

    ----
    rich
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.