JS_BLACOLE.SMTT
JS_BLACOLE.SMTT is a Trojan that circulates via hacked Japanese websites. One of the hacked websites encompasses an obfuscated JavaScript, found as JS_BLACOLE.SMTT, which is generated to load a hidden iframe that loads behind the target computer user's Internet browser. The hidden iframe loads a .PHP file, found as JS_BLACOLE.MT, that checks which programs are installed on the attacked PC user's computer. After checking, it then loads the appropriate exploits. These cause the download of harmful PDF files, which exploit an old vulnerability (CVE-2010-0188) in Adobe Reader and Acrobat. Other applications contaminated for exploits incorporate Java and Flash. This behavior specifies that the cybercrook used the Blackhole Exploit Kit in these attacks.
Submit Comment
Please DO NOT use this comment system for support or billing questions. For SpyHunter technical support requests, please contact our technical support team directly by opening a customer support ticket via your SpyHunter. For billing issues, please refer to our "Billing Questions or Problems?" page. For general inquiries (complaints, legal, press, marketing, copyright), visit our "Inquiries and Feedback" page.