Analysis Of Recent "Trojan Tacorti" Malware Run

This report documents an active malware campaign that delivers a trojanized binary (Open.Me.For.free.Access1.1.exe / Tacorti) via porn-affiliated web pages and spam; the malware installs a browser helper object (BHO) to inject affiliate content for monetization. The author lists live malicious domains, an MD5 hash, resolving IP/nameserver and AS information (AS8551), and notes stylistic and infrastructure overlaps with the Koobface gang.