Friday, August 22, 2008

Seen in the wild: Spam using swf files to avoid detection

Swfspam1238123888

Dissasembled, the output is actually this:

movie 'spammed.swf' compressed // flash 6, total frames: 136, frame rate: 12 fps, 1x1 px

// unknown tag 88 length 78

frame 14
getURL hxxp://moyapodruzhka. com/?wmid=44&sid=44' ''
end // of frame 14
end

(Simply a redirect to a Russian porn site.)


Alex Eckelberry

No comments:

Post a Comment