Home Malware Programs Trojans JS_BLACOLE.HBA

JS_BLACOLE.HBA

Posted: March 29, 2012

Threat Metric

Threat Level: 2/10
Infected PCs: 251
First Seen: March 29, 2012
Last Seen: September 14, 2022
OS(es) Affected: Windows

JS_BLACOLE.HBA is a Trojan which may be hosted on a compromised Holland website named nu.nl and run when a computer user enters this particular website. JS_BLACOLE.HBA embeds an IFRAME tag that reroutes computer users to certain web pages. JS_BLACOLE.HBA downloads and loads the certain Java applet. JS_BLACOLE.HBA was the Nuclear Pack toolkit for attack codes. When running, JS_BLACOLE.HBA looked for vulnerable program on the compromised PC followed with downloading a proper attack code. Remove JS_BLACOLE.HBA as early as possible from the infected computer.

Technical Details

Additional Information

The following URL's were detected:
downloadfreepopularguard.rest
Loading...