Home Malware Programs Trojans Gen:Variant.Kazy.44360

Gen:Variant.Kazy.44360

Posted: November 21, 2011

Threat Metric

Ranking: 13,257
Threat Level: 9/10
Infected PCs: 2,419
First Seen: November 21, 2011
Last Seen: October 8, 2023
OS(es) Affected: Windows

Gen:Variant.Kazy.44360 is a malicious Trojan that is included in a spam email on a rejected transfer that allegedly comes from Esse Hypothekenbank. The fake email message contains a malicious link that if clicked opens a malicious website and tries to persuade the PC user to download an update a bogus Adobe Flash Player that drops Gen:Variant.Kazy.44360. Even if the update offer is rejected, the PC user has already visited a malicious website. The creators of the dangerous website involved a .php file which hides an obfuscated Java script. This Java script starts an app which operates as a drive-by-downloader. It tries to exploit the PC user's computer by attacking a vulnerability described in CVE-2010-0840. If the exploit works, the app downloads further data to the PC user's computer, who became a victim. The downloaded .dll file is Gen:Variant.Kazy.44360. The malicious website also tries to infect the visitor with social engineering techniques by suggesting a supposedly necessary software update and uses the technical methods to start a drive-by-infection. If you receive a phony email from Esse Hypothekenbank, do not click the link and delete the email as soon as possible. Otherwise, you will download and install the fabricated update because you will infect your computer with Gen:Variant.Kazy.44360.

Loading...