Malware Advisory for users of Odnoklassniki.ru

A Russian website Odnoklassniki.ru, a social networking site that connects classmates and friends, seems to be distributing malware in a form of Trojan-Downloader.JS.Agent.ejl. It appears that another Russian website that supplies ad content – Adriver.ru is responsible for delivering the malware through it’s ad content, such as banners, on Odnoklassniki.ru.

According to Kaspersky.com website, the Trojan was detected at 4:08 a.m. on August 14, 2009, and the update released at 2:39 p.m.on the same day, meaning that as of that time, all users of Kaspersky antivirus were protected considering that they have received either automatic, or performed a manual virus signature update.

According to various online sources, Odnoklassniki.ru support team was notified of the problem on August 23, 2009, however, they have not responded as of 6:50 p.m. EDT.

Odnoklassniki.ru has over 40 million subscribers worldwide. We advise our valued customers and dear readers to refrain from visiting the website, and inform their friends and employees of a possible problem.

Unfortunately, many people use social media sites in a work place jeopardizing corporate network and data security.

The Driz Group 

Leave a Reply