Avast community forum
Home
Help
Search
Login
Register
Avast WEBforum
»
Other
»
Viruses and worms
(Moderators:
Maxx_original
,
misak
) »
Defacement signature found in 157 websites, this is one.
« previous
next »
Print
Pages: [
1
]
Go Down
Author
Topic: Defacement signature found in 157 websites, this is one. (Read 1386 times)
0 Members and 1 Guest are viewing this topic.
polonus
Avast Überevangelist
Probably Bot
Posts: 33912
malware fighter
Defacement signature found in 157 websites, this is one.
«
on:
March 30, 2015, 05:51:39 PM »
See:
http://killmalware.com/clustermailserver.in/
Missed detection:
https://www.virustotal.com/en/url/2b1eef3a151747024d4ff7c2aca858882b45b6e3ecf6d068d4d07984bc602e50/analysis/
and here:
http://quttera.com/detailed_report/clustermailserver.in
Detected:
http://quttera.com/detailed_report/clustermailserver.in
Privacy error:
https://clustermailserver.in/
-> cert from Hostname host.jhaiji.com
See:
https://urlquery.net/report.php?id=1427729641355
Read here:
https://forum.avast.com/index.php?topic=135454.0
for link to sole-sad.persiangig dot com
ISSUE DETECTED DEFINITION INFECTED URL
Defacement MW:DEFACED:01 htxp://survivorweb.com ( View Payload )
Defacement MW:DEFACED:01 htxp://survivorweb.com/404javascript.js ( View Payload )
Web site defaced. Details:
http://sucuri.net/malware/entry/MW:DEFACED:01
<title>---==[ Hacked By MoHaMaD VakeR ]==---</title><link rel="shortcut icon" href="htxp://sole-sad.persiangig.com/image/peace-and-love.jpg" /><body text="#000000" bgcolor="#000000"><center><style type="text/css">#sole { font: 60px impact; color:#0f0; </style><table height=100% width=100%><td align=center><table height=100% width=100%><td align=center>
polonus
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.
Use NoScript, a limited user account and a virtual machine and be safe(r)!
polonus
Avast Überevangelist
Probably Bot
Posts: 33912
malware fighter
Re: Defacement signature found in 157 websites, this is one.
«
Reply #1 on:
May 11, 2015, 04:58:33 PM »
Update another defacement, detected by Avast as JS:Iframe-XL [Trj] ->
http://killmalware.com/littlelightfilms.com/
See:
https://www.virustotal.com/nl/url/0fd96e0668e2c9ce12683f47ab1521036c8af7f9e37f41fcfd002925235bc664/analysis/
Re:
https://sitecheck.sucuri.net/results/www.littlelightfilms.com
Blacklisted by Google Safebrowsing:
http://safebrowsing.clients.google.com/safebrowsing/diagnostic?site=littlelightfilms.com
polonus
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.
Use NoScript, a limited user account and a virtual machine and be safe(r)!
Print
Pages: [
1
]
Go Up
« previous
next »
Avast WEBforum
»
Other
»
Viruses and worms
(Moderators:
Maxx_original
,
misak
) »
Defacement signature found in 157 websites, this is one.