Search

This is a detection from the Trend Micro Predictive Machine Learning mechanism. It uses advanced machine learning technology to correlate threat information and perform in-depth analysis to detect emerging unknown security risks. It does this through...

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

This detection is for web threats related to malicious URL redirectors. It is common for web threats to redirect URLs to avoid detection. An example is using meta refresh and HTTP status codes of 3XX. Other examples are using scripts like Javascript,...

This is the Trend Micro heuristic detection for script files containing an inserted IFRAME tag which may redirect users to possibly malicious websites.

* indicates a new version of an existing rule Deep Packet Inspection Rules: Asterisk RTP Protocol 1009953 - Digium Asterisk PJSIP In-Dialog MESSAGE Request Denial-of-Service (CVE-2019-12827) DCERPC Services 1003292* - Bloc...

This Trojan executes when a user accesses certain websites where it is hosted. It does not have any propagation routine. It does not have any backdoor routine. It requires its main component to successfully perform its intended routine.

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It does not have any propagation routine. It does not have any backdoor routine. It redirects browsers to ...

This Backdoor arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

* indicates a new version of an existing rule Deep Packet Inspection Rules: DCERPC Services 1004808* - Identified Big-Endian Byte Order 1008560* - Microsoft Windows Search Remote Code Execution Vulnerability (CVE-2017-8620)...

This hacking tool may arrive bundled with malware packages as a malware component.

This hacking tool arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

This detection is for web threats spreading ransomware. These web threats, usually URLs, are embedded in email or are seen in website redirections. It is used to redirect and download ransomware.

This detection is for web threats related to ransomware known as Curve-Tor-Bitcoin (CTB) Locker. These web threats, usually URLs, are embedded in email as attachment and used to redirect and download CTBLocker, a known ransomware family.

This detection is for web threats related to Cryptowall . These web threats, usually URLs, are embedded in email and used to redirect and download Cryptowall malware. These threats are also found in HTML file attachments, embedded as iframe tags. Use...

A traffic redirection vulnerability has been reported in PHP, Go, Apache HTTP Server, Apache Tomcat, HHVM, Lighttpd, Nginx and Python. This vulnerability allows attackers to...

This detection is for web threats related to TorrentLocker . These web threats, usually URLs, are embedded in email and used to redirect to spoofed domains. These spoofed domains copy legitimate sites like well-known postal services and courier servi...

Spam campaigns, carrying links or malicious .doc files, exploiting the Microsoft Office vulnerability known as CVE-2017-11882 is spreading in Australia and Japan. The...

Microsoft addresses several vulnerabilities in its July batch of patches: CVE-2017-0243 | Microsoft Office Remote Code Execution Vulnerability Risk Rating: Important A remote code execution vulnerabi...

* indicates a new version of an existing rule Deep Packet Inspection Rules: Apache Kylin 1012483* - Apache Kylin Authentication Bypass Vulnerability (CVE-2025-61733) React Server 1012506 - React Server Remote Code Execution...