JS/Phish.FKH!tr

Analysis

JS/Phish.FKH!tr is a detection for an Redirect trojan.

• Following are some of the near/exact IOCs/file hash associated with this detection:
  
  • 27FA5A92598CA4DB56AD24C9961EDB32
  • 81AADAD36F31250A76C0C51DD5F8BAA4



• The following are some illustrations related to the malware during our quick analysis:
  

  Figure 1: malware Distributed as email.

  
  

  Figure 2: Landing Page but has since been blocked by domain admin.

  
  

Recommended Action

• Make sure that your FortiGate/FortiClient system is using the latest AV database.
• Quarantine/delete files that are detected and replace infected files with clean backup copies.