http://{BLOCKED}.236.35

 Analysis by: Clarisa Joyce Velasco

 URL BLOCKING DATE/TIME: 16 Jun 2013 02:00:00 PM GMT-8
 RATING: HIGH
 DOMAIN: 60.239.236.35
 CATEGORY: Disease Vector
 DESCRIPTION:

TSPY_QHOST.QFB redirects users to this URL when users visit various Korean banks. The malware uses BAT_QHOST.QFB to modify an infected system’s HOST files.