NEWS FROM THE LAB - Friday, February 2, 2007

Some football-related thingy Posted by Mikko @ 22:38 GMT

A number of unrelated web sites have been hacked into over the last days. They have been modified by inserting a reference to a script on a Chinese site called www.dv521.com.

Some of the hacked sites are related to the Super Bowl, being played this weekend.

However, the scripts will ultimately try to download a file called W1C.EXE from the dv521.com site. We detect the file as Trojan-PSW.Win32.WOW.pk and the site is now offline. Case closed.