Bitdefender China Hacked Again..

Bitdefender at China website was hacked again ! Last time happened just two months ago that happened on August.

Firefox block the entry for this page that showed like image below.

Bitdefender website still contain the malicious code that re-directing to other website. The final landing website is hxxp://kybbt.cn same IP address with hxxp://sdse12345.cn

However, malware file that dropped in machine was sent to Virustotal for analysis. Detection rate is high (90%) or 37/41.

sdse12345.cn (121.12.169.208)

Domains sharing the same IP address:

tu-21.cn

wg879.cn

www.wg879.cn

sdse12345.cn

kybbt.cn

Reference: kafan.cn