"the C&C [command-and-control] server replies with a piece of JavaScript code"
Which is blocked by NoScript.
Again, NoScript to the rescue. Frankly, NoScript should be considered as a must-have, receive a Public Utility Award as well as a Keeping The Internet Safe Award, and be enshrined as a tool that defends Democracy and Privacy.
Oh, and somebody give its author a million bucks. He deserves it.
Meanwhile, a Flash Update ? Really ? And "high interest" people fall for that ?
I wonder what the malware guys will do when Flash has been eradicated from the Internet. Are they going to try to push YouTube updates ?
Biting the hand that feeds IT
