Author Topic: RapidSwitch, fake movies and a browser hijack  (Read 3027 times)

0 Members and 1 Guest are viewing this topic.

January 08, 2011, 10:49:49 am
Read 3027 times

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
RapidSwitch, fake movies and a browser hijack

Quote
Whilst investigating a site earlier, I stumbled upon a site claiming to be a vanilla porn site. Not surprisingly, it turned out to be slightly more than that.

This site offers its victims the usual player you're used to seeing on the likes of YouTube - with a major difference. Instead of the fake codec, or actual video, an HTA is downloaded and executed, that contains;

http://hphosts.blogspot.com/2011/01/rapidswitch-fake-movies-and-browser.html
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net