HTML_DLOADER.FOG

This is the Trend Micro detection for Web pages that contain hidden malicious iFrame tags, which leads to the download and execution of the following malicious files:

• TROJ_AGENT.AEKC
• TROJ_DLOADER.HJA
• TROJ_TIBS.OA
• TROJ_TIBS.OC
• TROJ_TIBS.OE
• TROJ_TIBS.OF

As a result, routines of the downloaded malicious files are also exhibited on the affected system. The said iFrame tags may contain links which may lead to the download of other malware, specifically:

• TROJ_DROPPER.DRL
• TROJ_PANDEX.BN
• TROJ_AGENT.WNQ
• TROJ_AGENT.AEKC
• TROJ_AGENT.OLW
• DIAL_RAS.JS

An affected Web page may contain an iFrame connecting to another Web page, which in turn connects to another iFrame redirecting to other Web pages to consequently download more malicious files.

It also connects to a certain URL.

Related Items