Copycat antivirus site serves malware

By

A malicious website based on the design of Virustotal is recuiting botnet zombies.

A malicious copycat of the Virustotal website has emerged that aims to infect visitors with malware to build a botnet.

The site included JavaScript that installed a worm (Worm.MSIL.Arcdoor.ov) which collects victim machine information for a command and control server, according to Kaspersky Lab.

The botnet performs DDoS attacks including synflood, httpflood, udpflood and icmpflood, researcher Jorge Mieres wrote in a blog.

The real Virustotal website is a free malware detection service.


Copycat antivirus site serves malware
Got a news tip for our journalists? Share it with us anonymously here.

Copyright © SC Magazine, Australia

Tags:

Most Read Articles

Travel eSIMs secretly route traffic over Chinese and undisclosed networks: study

Travel eSIMs secretly route traffic over Chinese and undisclosed networks: study

"Widespread data theft" hits Salesforce customers via third party

"Widespread data theft" hits Salesforce customers via third party

Attackers weaponise Linux file names as malware vectors

Attackers weaponise Linux file names as malware vectors

Home Affairs adds SecOps to new cyber risk overhaul

Home Affairs adds SecOps to new cyber risk overhaul

Log In

  |  Forgot your password?