Subscribe to RSS feeds


Feb11
by David Sancho (Threats Analyst)

No, that’s not me…
I am a Senior Antivirus Researcher, while the David Sancho in the above screencap is a young Spanish actor with the same name. He has this cute promo page that has a gallery of his pictures and performances.

Amazingly, the page was first compromised and iFramed as early as November 2007.
I contacted my namesake and he seemed to clean up the page after a few weeks. Shortly after that, the page was infected again and since then it has been sporting a number of different iFrames and obfuscated JavaScript code. I contacted the abuse team of the site provider and hopefully it will be solved once and for all–and soon. I hate having my name associated with malware, even if I had nothing whatsoever to do with the page.

If people got around to thinking I was the David Sancho owning this compromised site, then it would have been truly ironic.




Comments are closed.



© Copyright 2008 Trend Micro Inc. All rights reserved. Legal Notice