Copycat antivirus site serves malware

By on
Copycat antivirus site serves malware

A malicious website based on the design of Virustotal is recuiting botnet zombies.

A malicious copycat of the Virustotal website has emerged that aims to infect visitors with malware to build a botnet.

The site included JavaScript that installed a worm (Worm.MSIL.Arcdoor.ov) which collects victim machine information for a command and control server, according to Kaspersky Lab.

The botnet performs DDoS attacks including synflood, httpflood, udpflood and icmpflood, researcher Jorge Mieres wrote in a blog.

The real Virustotal website is a free malware detection service.

Got a news tip for our journalists? Share it with us anonymously here.

Copyright © SC Magazine, Australia

In Partnership With

Most Read Articles

Log In

Username / Email:
  |  Forgot your password?