
No, that’s not me…
I am a Senior Antivirus Researcher, while the David Sancho in the above screencap is a young Spanish actor with the same name. He has this cute promo page that has a gallery of his pictures and performances.
Amazingly, the page was first compromised and iFramed as early as November 2007.
I contacted my namesake and he seemed to clean up the page after a few weeks. Shortly after that, the page was infected again and since then it has been sporting a number of different iFrames and obfuscated JavaScript code. I contacted the abuse team of the site provider and hopefully it will be solved once and for all–and soon. I hate having my name associated with malware, even if I had nothing whatsoever to do with the page.
If people got around to thinking I was the David Sancho owning this compromised site, then it would have been truly ironic.


