HTML_IFRAME.USR

HTML_IFRAME.USR is a Trojan that is included in the Blackhole Exploit Kit (BHEK) spam campaign targeting social networking website Pinterest and its users. HTML_IFRAME.USR spreads via spam email messages. The attacked computer user receives the spam email in his/her inbox. The unsolicited email masquerades as a legitimate email from Pinterest and informs the victimized PC user about a successful password change. The fake email message also includes a link that would enable the computer user to see the new password. If the affected recipient clicks on the link, he/she is redirected to numerous suspicious websites. This redirect is detected as HTML_IFRAME.USR. HTML_IFRAME.USR then downloads another malware threat onto the infected computer system, labeled TROJ_PIDIEF.USR, which in turn drops BKDR_KRIDEX.KA. HTML_IFRAME.USR executes the downloaded files. HTML_IFRAME.USR connects to certain websites to drop and execute a malicious file.