There are always peculiar things malware researchers discover while analyzing new samples.
Let’s remember the filename as HD Porn TV for later
Our victim runs it thinking they will see the latest porno in HD quality. Instead they get a new browser ‘theme’ with a Turkish flavor:
The bad guys hijack Winsock:
And filter traffic through:
From now on, all ‘sensitive’ searches such as porn are no longer displayed:
Our victim not only gets a nasty Trojan on their PC, they also get denied of anymore porn.
Next time, don’t be so naughty
Posted by Jerome Segura on Malware Diaries