Super Glue website stuck with five-day malware infection

But slippery Trojan disappears.

The Super Glue website has been infected by malware for the past five days.

According to Avast, the company website has been infected with a drive-by download which infects users with the Trojan JavaScript Redirector.

Avast said that Super Glue has been informed about the infection which appears to have been removed at the time of publication.

Alena Varkockova, virus lab analyst at Avast, said that the scrips creates a URL at ‘cameoprincess.com' that creates a tag which activates the code.

“The ‘cameoprincess' page contains a JavaScript code, which redirects the visitor several times.

This last address seems to be the page that contained the payload but was since deactivated.

By using a combination of redirectors, it's statistically difficult to uncover the precise payload, the likely candidate is some sort of fake anti-virus,” she said.

She also said that while injected JavaScript downloaders or redirectors are fairly common, the specific AVF Trojan at the superglue site is not.

“It's not in the top 50 malware rankings, but it has already been reported in over 500 sites today,” she said.

This article originally appeared at scmagazineuk.com

Copyright © SC Magazine, US edition
Super Glue website stuck with five-day malware infection
Keywords
Technology

What are your thoughts on this article? Add your comment below.

To begin commenting right away, you can log in below or register an account if you don't yet have one. Please read our guidelines on commenting. Offending posts will be removed and your access may be suspended. Abusive or obscene language will not be tolerated. The comments below do not necessarily reflect the views or opinions of SC Magazine, Haymarket Media or its employees.

NOTE: You must be a registered member of SC Magazine to post a comment.

Click here to login | Click here to register
comments powered by Disqus
Sign up to receive SC Magazine email newsletters
   FOLLOW US...
Most Read