Trojan

Hi,

It seems a trojan has been found on the website of the Monaco foundation against AIDS :
hxxp://www.fightaidsmonaco.com/fr.htm

It always warns me about HTML:Illiframe-B [Trj]
:frowning:

It seems to be related to a russian website, if I’m not wrong.

Hi Cephei,

Thanks :slight_smile:

This kind of detection is very common these days, with many ‘legitimate sites’ becoming hacked to distribute malware:

Every 3.6 seconds a website is infected

This site is not so good, there is a iframe linking to anthor page on the same site (hxxp://www.fightaidsmonaco.com/homefr.htm), which contains another iframe linking to hxxp://biozov.ru - a suspect malware site.

It also tries to avoid scanning by redirecting to another - non-standard - port, but this obviously doesn’t work :stuck_out_tongue:

-Scott-