Click fraud

Digging deeper into the Porn Trojan, we reverse-engineered the source code and found the original form the malware authors are using.

This form contains a few buttons and text boxes and is designed to display web pages inside. There is also a log created that shows what it is doing at the moment.

That log reveals the intent behind the porn trojan, click fraud, to generate high search engine rankings.

You can see it in the screen below: Starting to click… Clicked 3…..

The original form:

Jerome