SWF_ADHIJACK.D

To get a one-glance comprehensive view of the behavior of this malware, refer to the Behavior Diagram shown below.

Malware Overview

This malicious Shockwave Flash (.SWF) object file may arrive on a system via email informing users that they have received a postcard. Below is a screenshot of the object it displays:

Once clicked, it attempts to modify the 2wire modem localhost table to perform pharming against the Banamex bank. It does this by pinging certain requests to the modem.

Related Items