SYMBOLCOMMON_NAMEaka. SYNONYMS
js.lnkr (Back to overview)

LNKR


The LNKR trojan is a malicious browser extension that will monitor the websites visited by the user, looking for pages with administrative privileges such as blog sites or web-based virtual learning environments. When the administrative user posts to the page, the infected extension will execute stored cross-site scripting attack and injects malicious JavaScript into the legitimate HTML of the page. This is used to redirect the second-party visitors of the site to both benign and malicious domains.

References
2020-03-20KrebsOnSecurityBrian Krebs
@online{krebs:20200320:case:ae196f4, author = {Brian Krebs}, title = {{The Case for Limiting Your Browser Extensions}}, date = {2020-03-20}, organization = {KrebsOnSecurity}, url = {https://krebsonsecurity.com/2020/03/the-case-for-limiting-your-browser-extensions/}, language = {English}, urldate = {2020-05-05} } The Case for Limiting Your Browser Extensions
LNKR
2019-10-16RiskIQJohn Omernik
@online{omernik:20191016:lnkr:5612e9a, author = {John Omernik}, title = {{LNKR: More than Just a Browser Extension}}, date = {2019-10-16}, organization = {RiskIQ}, url = {https://www.riskiq.com/blog/labs/lnkr-browser-extension/}, language = {English}, urldate = {2020-03-04} } LNKR: More than Just a Browser Extension
LNKR
2019-02-01Github (Zenexer)Paul Buonopane
@online{buonopane:20190201:lnkr:f79885e, author = {Paul Buonopane}, title = {{LNKR - Extension analysis - Flash Playlist}}, date = {2019-02-01}, organization = {Github (Zenexer)}, url = {https://github.com/Zenexer/lnkr/blob/master/recon/extensions/fanagokoaogopceablgmpndejhedkjjb/README.md}, language = {English}, urldate = {2020-05-05} } LNKR - Extension analysis - Flash Playlist
LNKR
2019-02-01Github (Zenexer)Paul Buonopane
@online{buonopane:20190201:information:2fbf14a, author = {Paul Buonopane}, title = {{Information about lnkr5, malware distributed via Chrome extensions}}, date = {2019-02-01}, organization = {Github (Zenexer)}, url = {https://github.com/Zenexer/lnkr}, language = {English}, urldate = {2020-05-05} } Information about lnkr5, malware distributed via Chrome extensions
LNKR

There is no Yara-Signature yet.