Sucuri Malware Labs

Sucuri on Twitter Sucuri on Facebook Sucuri on LinkedIn

Malware entry: MW:JS:1240Home  |  Notes  |  Malware data  |  Signatures  |  Tools  |  About

Description: Javascript included and used to distribute malware on osCommerce sites. The code is disguised as color pick, but in fact loads a malicous iframe (for the Fake AV).

Domains used: (all inside the 91.213.157.108):


Affecting: Any osCommerce site.

Clean up: Contact support: https://support.sucuri.net

Malware dump:

For all our web-based malware signatures, go here: http://labs.sucuri.net/?malwaredb