Threat Database Trojans JS/BlacoleRef.W

JS/BlacoleRef.W

By Domesticus in Trojans

The JS/BlacoleRef.W Trojan is a dangerous JavaScript Trojan that has been active since Spring of 2012. It is important to note that JS/BlacoleRef.W poses a severe risk to any computer that becomes infected with this threat. JS/BlacoleRef.W is a malicious JavaScript that can be inserted into an otherwise harmless website, usually compromised because of careless security settings. JS/BlacoleRef.W will redirect the victim's web browser to attack websites containing the Black Hole Exploit Kit, which in turn will steal dangerous information installing malware on the victim's computer. JS/BlacoleRef.W can also be distributed in malicious emails and social media messages, such as a recent wave of attacks involving fake LinkedIn messages.

Symptoms Associated with Attacks Involving the JS/BlacoleRef.W JavaScript Trojan

The JS/BlacoleRef.W attack is designed to be undetectable, meaning that JS/BlacoleRef.W will cause no explicit symptoms on the infected computer. The JS/BlacoleRef.W JavaScript loads an iframe in the background, which links to the malicious server. These links are activated while the victim is viewing content on the compromised websites. Unless a reliable anti-virus program is monitoring the victim's online traffic, no symptoms of the attack may manifest themselves. If the victim's computer is protected with a fully updated anti-malware program, an error message or alert may pop up at the moment that the JS/BlacoleRef.W script activates.

Computer users visiting an affected website may become infected with malware associated with JS/BlacoleRef.W. JS/BlacoleRef.W belongs to a large family of similar JavaScript Trojans that have become widespread since early 2012. These malware attacks load hidden iframes in order to take advantage of known vulnerabilities in JavaScript and in various Web browsers. The payload of these kinds of attacks varies depending on the intentions of the criminals distributing this malware. This is because the combination of JS/BlacoleRef.W, which acts as a background redirector and a malicious server using the BlackHole Exploit Kit to attack known vulnerabilities in the victim's computer results in a highly adaptable strategy that can be used for various purposes. In the case of the JS/BlacoleRef.W variant, this malicious JavaScript Trojan was used to infect computers with Trojans designed to steal personal information, banking and credit card details and to allow criminals to spy on the infected computer's contents and activity.

SpyHunter Detects & Remove JS/BlacoleRef.W

File System Details

JS/BlacoleRef.W may create the following file(s):
# File Name MD5 Detections
1. main.js a016388d1e734ee3413d15e1980d1145 0
2. jquery-easing-1.3.pack.js e3aa0b40ed452dff1c19a069396c2058 0
3. 2bd23ea16102b70d3c69cc8eac1dc28a.text_hmtl 2bd23ea16102b70d3c69cc8eac1dc28a 0
4. vt-upload-rETka 7d3943703c96d81d75fae54c4b90cb14 0
5. vt-upload-1KqCV 227cb6664ac28dd2b9412d79233bf63c 0

Trending

Most Viewed

Loading...