[Full-disclosure] Flash that simulates virus scan

[Joshua Tagnore]

List,

    Some time ago I remember that someone posted a PoC of a small site that
had a really nice looking flash animation that "performed a virus scan" and
after the "virus scan" was finished, the user was prompted for a "Download
virus fix?" question. After that, of course, a file is sent to the user and
he got infected with some malware. Right now I'm performing a penetration
test, and I would like to target some of the users of the corporate LAN, so
I think this approach is the best in order to penetrate to the LAN.

    I searched google but failed to find the URL, could someone send it to
me ? Thanks!

Cheers,
-- 
Joshua Tagnore
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20071031/8d486895/attachment.html