Threat Database Trojans Exploit.JS.CVE-2010-0188.e

Exploit.JS.CVE-2010-0188.e

By Sumo3000 in Trojans

Threat Scorecard

Threat Level: 90 % (High)
Infected Computers: 1
First Seen: March 15, 2013
Last Seen: April 19, 2020
OS(es) Affected: Windows

Exploit.JS.CVE-2010-0188.e is a Trojan that is spread via spam emails carrying the malevolent PDF attachment. The bogus emails are created in German and most are sent from German IP addresses. The computer names referenced in the email headers are often of the form 'Andreas-PC' or 'Kerstin-Laptop' (the names have been changed to protect the innocent), which indicates that they had been sent from German home PCs.
The malevolent PDF attachment, found as Exploit.JS.CVE-2010-0188.e, names are of the form 'Mahnung recipents name.pdf' (Mahnung is German for 'reminder' or 'overdue notice') and the exploit used was CVE-2010-0188 (Adobe Acrobat libtiff Remote Code Execution Vulnerability).

Exploit.JS.CVE-2010-0188.e is hard to notice because it is covered under two layers of JavaScript. If Exploit.JS.CVE-2010-0188.e is successful, it downloads an executable from 'seodirect-proxy.com/adobe-update.exe'.

File System Details

Exploit.JS.CVE-2010-0188.e may create the following file(s):
# File Name Detections
1. Mahnung recipents name.pdf

Trending

Most Viewed

Loading...