RapidSwitch, fake movies and a browser hijack

Discussions of all Adware-Spyware-Malware related topics to include all security products users may have concerns with.

Moderators: Admin Team, Moderators

User avatar
MysteryFCM
Site Admin
Site Admin
Posts: 3721
Joined: Sun May 15, 2005 12:42 pm
Location: Newcastle, UK
Contact:

RapidSwitch, fake movies and a browser hijack

Postby MysteryFCM » Sat Jan 08, 2011 3:50 am

RapidSwitch, fake movies and a browser hijack

Whilst investigating a site earlier, I stumbled upon a site claiming to be a vanilla porn site. Not surprisingly, it turned out to be slightly more than that.

This site offers its victims the usual player you're used to seeing on the likes of YouTube - with a major difference. Instead of the fake codec, or actual video, an HTA is downloaded and executed, that contains;


http://hphosts.blogspot.com/2011/01/rap ... owser.html
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net

Keeping it FREE!

Return to “Countermeasures Discussions\News”

Who is online

Users browsing this forum: Google and 2 guests