Trojan

[Cephei]

Hi,

It seems a trojan has been found on the website of the Monaco foundation against AIDS :
hxxp://www.fightaidsmonaco.com/fr.htm

It always warns me about HTML:Illiframe-B [Trj]
 

It seems to be related to a russian website, if I'm not wrong.

[spg SCOTT]

Hi Cephei,

Thanks

This kind of detection is very common these days, with many 'legitimate sites' becoming hacked to distribute malware:

Every 3.6 seconds a website is infected


This site is not so good, there is a iframe linking to anthor page on the same site (hxxp://www.fightaidsmonaco.com/homefr.htm), which contains another iframe linking to hxxp://biozov.ru - a suspect malware site.


It also tries to avoid scanning by redirecting to another - non-standard - port, but this obviously doesn't work

-Scott-