SiteCheck Signatures

  1. Home
  2. Signatures
  3. SiteCheck Signatures
  4. malware-entry-mwiframehd473

malware-entry-mwiframehd473

Description:

Malicious iframe loaded from description2011.ru (and many others domains). Used to distribute malware from external web sites while not being visible to the user.

 

Other domains used in this attack:


anayadora.cz.cc
beazerne.cz.cc
dagdabor.cz.cc
description2011.ru
gavinrazel.cz.cc
gholbirim.cz.cc
nalmelore.cz.cc
nalmenius.cz.cc
quake2012.ru
thomeena.cz.cc

Affecting:

GoDaddy sites.

 

Reach:

Google lists at least 2 thousand sites blacklisted due to this iframe

 

Clean up:

This malware is generally hidden inside the index files.

 

Malware dump (sample of malware):