Skip to content

Malware

LNKR

The LNKR trojan is a malicious browser extension that will monitor the websites visited by the user, looking for pages with administrative privileges such as blog sites or web-based virtual learning e

LNKR is a JavaScript malware family.

Background

The LNKR trojan is a rogue browser extension that watches the sites a user visits, hunting for pages where the user holds administrative privileges, such as blogs or web-based virtual learning environments. When that admin user posts to such a page, the infected extension launches a stored cross-site scripting attack, injecting malicious JavaScript into the page's legitimate HTML. The injected code is used to redirect the site's other visitors to a mix of benign and malicious domains.


Source: Malpedia (Fraunhofer FKIE).