Author Topic: Fake e-book link scam - kix_core.js malware?  (Read 1236 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 34065
  • malware fighter
Fake e-book link scam - kix_core.js malware?
« on: September 01, 2015, 10:25:01 PM »
Link on Google search-page: -https://www.google.pl/url?sa=t&rct=j&q=&esrc=s&source=web&cd=2&cad=rja&uact=8&ved=0CCgQFjABahUKEwjspvqo0tbHAhVpvnIKHfKNBpM&url=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1pX2qmHWoZNfLk0DEJtBtYFI7AKLt44xa_pKhrrB1aoY&usg=AFQjCNFlD0sDoPitzyczbBY-qhTrh6mNdQ

Flagged as malicious site: https://www.virustotal.com/nl/url/0a5f78f9583de77bb4927bf37e2290bf97032190cad30b3a0aeed024055d15d0/analysis/1441138292/
See IP history: https://www.virustotal.com/nl/ip-address/74.125.194.102/information/
Re: -http://www.domxssscanner.com/scan?url=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1pX2qmHWoZNfLk0DEJtBtYFI7AKLt44xa_pKhrrB1aoY

What malware here? -> -http://www.exedb.com/systemfiles/1343548595-kix_main_i18n_kix_core.js.html

polonus (volunteer website security analyst and website error-hunter)
« Last Edit: September 01, 2015, 10:29:07 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!