NetDefend IPS
IPS Advisories
NetDefend
Anti-Virus
Anti-Virus Advisories
NetDefend Web Content Filtering
NetDefend IP Reputation
NetDefend Update Center
IPS History
Feb 20, 2025
Feb 13, 2025
Feb 06, 2025
Jan 30, 2025
Jan 24, 2025
Anti-Virus History
Feb 12, 2022
Jan 06, 2022
Oct 23, 2021
Aug 29, 2021
Aug 23, 2021







Home > NetDefend Live > NetDefend IPS Service
NetDefend IPS Service
Print
Advisory ID
48972
Name
MALWARE.KONGTUKE.AND.SOC.GHOLISH.STYLE.WEB.INJECTION.C
IPS Signature
Advanced IPS Signature
IPS Group
IPS / MALWARE / GENERAL
Issued
Jan 30, 2025
Description
The compromised site injected a KongTuke script that redirected users to a fake CAPTCHA page, but it did not perform any further actions beyond the initial URL. Additionally, another injected script generated traffic resembling Soc Gholish tactics, leading users to a fake browser update page. This infection chain primarily aimed to deceive users into interacting with malicious content.
Enter your details in the box below to receive an email each time we post a new issue of our newsletter.







Feb 26, 2025