Trojan.JS.Iframe.BDV

The Trojan.JS.Iframe.BDV Trojan is used by criminals in an attack that involves turning innocent HTML websites into dangerous attack web pages. Criminals can insert a malicious script in Java which will direct visitors to a malicious file located on a remote host. The malicious code leading to the Trojan.JS.Iframe.BDV JavaScript Trojan is often injected in a way that makes Trojan.JS.Iframe.BDV invisible to computer users. A Trojan.JS.Iframe.BDV infection allows criminals to steal vital information about the infected computer system, which then allows criminals to impersonate the victim's computer system when logging in to that computer user's online accounts.

Specifically, Trojan.JS.Iframe.BDV steals information about the infected computer's web browser application, as well as stealing session cookies, which can then be used to gain access to the victim's personal information. The Trojan.JS.Iframe.BDV threat represents a serious security risk which presence shouldn't be tolerated; instead, Trojan.JS.Iframe.BDV should be removed immediately with a reliable anti-malware program. The Script that leads to Trojan.JS.Iframe.BDV will usually be detected as HTML:Script-inf by some security programs. To avoid these kinds of attacks, it is recommended to use security software that includes HTTP-filtering and active scanning of all web traffic.

Sources of a Trojan.JS.Iframe.BDV Attack

The malicious script associated with the Trojan.JS.Iframe.BDV attack has been detected on several web servers that are usually trustworthy. The effects of Trojan.JS.Iframe.BDV are different depending on the nature of the infected website. For example, websites that allow computer users to shop online with their credit cards that have been hacked with Trojan.JS.Iframe.BDV can severely affect visitors. Once criminals use Trojan.JS.Iframe.BDV to gain access to the victim's session cookie, the victim's account can be used in order to shop for goods on that website, charging the purchases to the victim's credit card, without the victim's knowledge or authorization.

As long as this malicious script is being used in combination with Trojan.JS.Iframe.BDV, theoretically, criminals can upload any malicious file they want to the host containing Trojan.JS.Iframe.BDV, taking advantage of the malicious redirect script to attack the victim's computer with other malicious software. ESG security analysts recommend that all website managers use safe passwords, especially when it comes to File Transfer Protocol accounts. While it may be possible that these websites were hacked by exploiting vulnerabilities in their software, it is much more likely that criminals have managed to gain access to the website's passwords through social engineering attacks and password-stealing malware.