http://{BLOCKED}orld.com/6.exe

 Analysis by: Jeann Therese Muninio

 URL BLOCKING DATE/TIME: 18 Jun 2013 07:55:00 AM GMT-8
 RATING: HIGH
 DOMAIN: ngnetworld.com
 CATEGORY: Virus Accomplice
 DESCRIPTION:

TSPY_FAREIT.ACU connects to this website to download and execute a malicious file. This malware disguises itself as an Opera update. Cybercriminals behind this threat stole an outdated Opera digital certificate, which they used to sign this malware.

Related Malware