2017-10-26 - EITEST CAMPAIGN SENDS HOEFLERTEXT POPUPS OR FAKE AV PAGE

NOTES:

 

ASSOCIATED FILES:

  • 2017-10-26-EITest-HoeflerText-popup-sends-NetSupport-RAT.pcap   (3,515,353 bytes)
  • 2017-10-26-EITest-script-causes-fake-AV-page.pcap   (31,058 bytes)
  • 2017-10-26-AppData-Roaming-Diariosd-client32.ini.txt   (951 bytes)
  • 2017-10-26-Font_Chrome.exe   (250,366 bytes)
  • 2017-10-26-fake-AV-audio.mpg   (262,144 bytes)
  • 2017-10-26-fake-AV-page.txt   (4,374 bytes)
  • 2017-10-26-page-from-halfandhalfteaexpress.com-with-injected-EITest-script-for-HoeflerText-popup.txt   (67,418 bytes)
  • 2017-10-26-page-from-halfandhalfteaexpress.com-with-injected-EITest-script-for-fake-AV-page.txt   (22,375 bytes)

 

QUICK DETAILS

BACKGROUND:

TODAY'S TRAFFIC:

 

IMAGES

 

 

 

 

 

 

 

 

Click here to return to the main page.