Lily Jade

Posted: May 29, 2012

Threat Metric

The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to give every identifiable malware threat. Our Threat Meter includes several criteria based off of specific malware threats to value their severity, reach and volume. The Threat Meter is able to give you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count, Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic breakdown of how all threats are ranked within our own extensive malware database. The scoring for each specific malware threat can be easily compared to other emerging threats to draw a contrast in its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to remove a threat or pursue additional analytical research for all types of computer users.

The following fields listed on the Threat Meter containing a specific value, are explained in detail below:

Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.

Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.

Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.

Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.

% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.

Threat Level:	2/10
Infected PCs:	83

First Seen:	May 29, 2012
OS(es) Affected:	Windows

Lily Jade or LilyJade is a Facebook-based worm that uses browser plugin infrastructure to achieve compatibility with multiple types of web browsers. Lily Jade's payload, which alters advertisements to funnel money to the criminals that distribute Lily Jade, isn't directly harmful to your PC but may result in attacks that are launched by untrustworthy third-party advertisements. Lily Jade is distributed via Facebook movie links that require Lily Jade's installation before the movie can be viewed, and, due to its minimal and unusual structure, Lily Jade may not be detected by many types of security programs. Since Lily Jade can easily be tweaked to load hostile content, SpywareRemove.com malware analysts suggest deleting Lily Jade with adequately competent anti-malware programs if you've installed Lily Jade by accident (or on purpose).

The New Avenues of Advertising That Lily Jade Has on Offer

Lily Jade is currently sold by its creator, Dru Mundorff, for the 'low' price of a thousand dollars on various hacking forums. In exchange for paying Lily Jade's price tag, criminals gain access to Lily Jade's ability to infect the computers of Facebook aficionados – and as a result, take over control of any advertisements that play on popular websites. Targeted site advertisements include Youtube, Facebook, MSN and popular search engines, and the advertisements that are displayed on these sites can be changed to redirect to virtually any type of online content.

While the potential for advertising profit in Lily Jade is obvious, criminals can also use Lily Jade to distribute malicious software, redirect victims to phishing attacks and conduct other browser-based attacks. As a simple URL-redirecting PC threat, Lily Jade, like a browser hijacker, can be altered minutely to promote various types of PC threats and online attacks.

Lily Jade has achieved this remarkable if malicious feat by dint of a beta version of Crossrider, a browser plugin that is compatible with most types of web-browsing applications. Because Lily Jade is a browser plugin that's based on the reputable framework of Crossrider, SpywareRemove.com malware research team warns that many types of security programs may not be able to detect Lily Jade, although cautious Internet behavior can help prevent your PC from ever being infected by Lily Jade at all. Anti-malware software should still be used after contact with Lily Jade, both to detect Lily Jade and to detect any other hostile software that Lily Jade may have installed.

Keeping Your Ad Waves Clear of Mr. Mundorff's Baby Worm

The default version of Lily Jade is designed to distribute itself in the form of fake movie links about Justin Bieber. These links are spammed in Facebook via compromised accounts. Hence, as long as you don't click Lily Jade's links and install Lily Jade, your PC should be safe from infection – at least until Lily Jade's criminal customers create a new variant of the Lily Jade worm.

Web browsers that SpywareRemove.com malware researchers have confirmed as being vulnerable to this installation method for Lily Jade include Internet Explorer (version 7 and later), Firefox (version 3.5) and Chrome, although other browsers may also be affected.

Lily Jade

Threat Metric

The New Avenues of Advertising That Lily Jade Has on Offer

Keeping Your Ad Waves Clear of Mr. Mundorff's Baby Worm

Leave a Reply