Fake Video Codecs Replacing Fake AV Pages
ID: 36d47e09-b4dc-574e-bfaf-57f62235135a
STIX ID: report--36d47e09-b4dc-574e-bfaf-57f62235135a
Feed Name: Zscaler Security Research Blog
Threat Score
The report describes an active SEO-spam campaign that redirects search results to fake Flash video pages which prompt users to download a malicious "codec" executable. These pages reuse fake-antivirus-style infrastructure (example domain: www2.realcleaner23p.co.cc), are delivered via spam links found in Google results, and the malicious binary is detected by 10 of 41 antivirus engines on VirusTotal.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.