Threat Database Trojans Trojan:SWF/Redirector.EQ


By Domesticus in Trojans

Threat Scorecard

Threat Level: 90 % (High)
Infected Computers: 8
First Seen: January 23, 2014
Last Seen: January 20, 2022
OS(es) Affected: Windows

Trojan:SWF/Redirector.EQ is a Flash Trojan that takes the form of a threatening Java script. This harmful script is programmed to force PC users that are visiting a website, to visit a different website instead. Using Trojan:SWF/Redirector.EQ, criminals may hack a website and force its visitors to be redirected to a threatening attack website. This means that threats like Trojan:SWF/Redirector.EQ may be essentially part of the numerous strategies used by threat creators. If you suspect that your computer was exposed to Trojan:SWF/Redirector.EQ, steps should be taken immediately to make sure that any threat that has been uploaded into your computer is removed immediately.

How Trojan:SWF/Redirector.EQ Works

Criminals may create attack websites that infect computers with threats. Using exploit kits, these websites may detect vulnerabilities in the visitors' computers or Web browsers and then attempt to exploit all found vulnerabilities at once in order to install threatening software or execute unsafe code on the visitor's computer. However, for these attacks to work, computer users must first visit these corrupted websites. That is where threats like Trojan:SWF/Redirector.EQ come in. Redirect Trojans like Trojan:SWF/Redirector.EQ are used to force a Web browser to visit a particular website, often opening it in a hidden window. If criminals can gain access to a website with high traffic and redirect its visitors to an attack website using a script like Trojan:SWF/Redirector.EQ, this may result in a high number of infected computers at once.

Trojan:SWF/Redirector.EQ has Been Associated with an Attack in Brazil

Franca is a city in Brazil that has its own website. Unfortunately for the government of this city, criminals have managed to hack its website in order to distribute threatening software. The official website for Franca, located in Sao Paulo, Brazil, contains a compromised code in a Java file. This harmful code loads a threatening Flash file that forces computer users to visit an attack website. This attack is not unique. Malware experts have observed that numerous Brazilian government websites have been compromised in similar ways in recent weeks. Because of this, computer users that have frequent contact with these types of Web pages should be extra careful to ensure that their PCs are adequately protected from these kinds of damaging scripts.


Most Viewed