More Waledac in action. Can you guess how much you master win?
The question of the title would seem that we carried waledac that love through pictures and various strategies of social engineering malware is continuing its bombardment of false cards to try to infect our computers.
With a thin extension of its images, this malware, which for many is the evolution of nuwar, presents new images:
With a thin extension of its images, this malware, which for many is the evolution of nuwar, presents new images:




However, the actions taken by Waledac go a little beyond what we have been seeing so far, combining their method of attack through Drive-by-Download. That is, in the code html iframe tag embedded are:
http://chatloveonline .com/tds/Sah7
This tag redirects after several levels, an online gaming site, from which again tries to trick users into downloading a binary is completed called AllSlots.exe (MD5:90ee59131ea66f1b050916da56400dee) which is neither more nor less that other malicious code.

While currently malware detection rate is low, it is always advisable to run a scan to prevent potential infections or, directly, not to download files from untrusted sites or links.
Related information
Waledac more loving than ever
Social Engineering and Waledac Valentine
Jorge Mieres
0 comentarios:
Post a Comment