SiteCheck Signatures

  1. Home
  2. Signatures
  3. SiteCheck Signatures
  4. malware-entry-mwiframehd499

malware-entry-mwiframehd499

Description:

Malicious iframe loaded from http://chadon.nl/news/ (and many others domains). Used to distribute malware from external web sites while not being visible to the user. The iframe is generally enclosed between a <div style="display:none">

 

Other domains used in this attack:


http://chadon.nl/news/

Affecting:

Any web site (no specific target).

 

Reach:

Google lists at least 4 thousand sites blacklisted due to this iframe

 

Clean up:

This malware is generally hidden inside the index files.