Threat Database Trojans TROJ_REDIR.CU

TROJ_REDIR.CU

By Domesticus in Trojans

Threat Scorecard

Ranking: 16,361
Threat Level: 90 % (High)
Infected Computers: 1,005
First Seen: December 27, 2011
Last Seen: June 25, 2023
OS(es) Affected: Windows

Social engineering attacks that take advantage of the holiday season are not uncommon. In fact, as the year ends, ESG security researchers have been flooded with a variety of dangerous malware infections that take advantage of Christmas in one way or another. While most of these kinds of holiday-themed malware infections take the form of phishing emails and fraudulent email attachments that take advantage of the increased shopping and travel of the season, TROJ_REDIR.CU takes a different approach. The TROJ_REDIR.CU malware infection is spread through a Facebook campaign which advertises a non-existent 'Christmas theme' for your Facebook wall and page. This campaign can be quite effective at attracting victims, especially because Facebook has attracted millions of inexperienced computer users that rarely go online for other reasons than to use this social network. Preying on the inexperienced, TROJ_REDIR.CU can quickly infect a computer system and then use the victim's Facebook account to spread in search of other potential victims.

What Happens When You 'Like' TROJ_REDIR.CU on Facebook?

The TROJ_REDIR.CU infection starts when the victim clicks on the 'Like' button on the 'Christmas theme' link mentioned above. Doing this takes the victim to a website which prompts the victim to download and install a plugin with the misleading name 'Free Cheesecake Factory Coupons.' However, this 'plugin' will not give the victim a Christmas theme for their Facebook wall. Rather, it will fill up the victim's Facebook wall with a status reading: Get Christmas Theme for FB on – - >>0< < – - free Christmas Theme for all FB users!!. Just Install this amazing new fb Christmas new look and change your profile looks show it to your friends. The TROJ_REDIR.CU plugin tags the victim's Facebook friends in this status, ensuring that it will appear in the victim's friend's walls and Timeline.

Do Not Become a Victim of TROJ_REDIR.CU

The TROJ_REDIR.CU plugin can affect all Internet browsers and is particularly dangerous because of the way it will try to infect all of your Facebook friends. This gives it an almost plague-like quality that allows TROJ_REDIR.CU to spread quickly from one computer to the other. ESG security researchers recommend being especially careful about holiday malware scams involving special holiday themes on social networks or holiday-themed unsolicited email messages containing attached files or embedded links.

Trending

Most Viewed

Loading...