There are always peculiar things malware researchers discover while analyzing new samples.
VirusTotal 24/43
Let’s remember the filename as HD Porn TV for later
Our victim runs it thinking they will see the latest porno in HD quality. Instead they get a new browser ‘theme’ with a Turkish flavor:
Internet Explorer:
Firefox:
The bad guys hijack Winsock:
And filter traffic through:
From now on, all ‘sensitive’ searches such as porn are no longer displayed:
Our victim not only gets a nasty Trojan on their PC, they also get denied of anymore porn.
Next time, don’t be so naughty
Posted by Jerome Segura on Malware Diaries