Is Philippine Bureau of Immigration website compromised, hosting malware?

According to Websense Security Labs™ and the Websense ThreatSeeker® Network, they have detected malicious emails disguised as HSBC Notifications.  A closer look at these emails, like the one you can see below, reveals that the link provided in the emails is a compromised URL belonging to the Philippine Bureau of Immigration.

Clicking the link prompts the user to download a malicious file called "atualizar.exe".

The Philippine Bureau of Immigration is using Joomla as their CMS and there is a file named “atualizar.php” which is a Portuguese word and translate to “update.php”. 

The file was probably replaced or inserted maliciously. This link “” if you hit it, the HTTP response status code is 302 which is the most common way of performing a redirection. It redirect to “” which probably contain the actual payload…


   2: [kramfs@viasvr temp]$ wget

   3: --2011-08-10 

   4: 17:15:03--

   5: Resolving 


   7: Connecting to 

   8:||:80... connected.

   9: HTTP request sent, 

  10: awaiting response... 302 Found

  11: Location: 

  12: [following]

  13: --2011-08-10 17:15:04--

  14: Reusing 

  15: existing connection to

  16: HTTP request sent, awaiting 

  17: response... No data received.

  18: Retrying.

  19: --2011-08-10 17:15:05-- (try: 2)

  20: Connecting 

  21: to||:80... connected.

  22: HTTP request sent, 

  23: awaiting response... 200 OK

  24: Length: 699460 (683K) 

  25: [application/x-msdos-program]

  26: Saving to: âatualizar.exeâ

  27: 100%[============================================================================>] 

  28: 699,460 63.4K/s in 12s

  29: 2011-08-10 17:15:17 (57.2 KB/s) - âatualizar.exeâ


Trend Micro flag this file as malicious….


You can find the VirusTotal analysis results for this .exe as it is detected by different AV solutions.

Source Reference: Websense Security Labs


  1. Pingback: Outboard Chrysler Force Starters

  2. Pingback: watch the big bang theory online free

  3. Pingback: PWC Seadoo Piston Kits

  4. Pingback: Outboard Yamaha Trim Motors

  5. Pingback: bitsler multicolor

  6. Pingback: Outboard Johnson Evinrude Coils

  7. Pingback: Off Road Parts

  8. Pingback: watch the big bang theory online free

  9. Pingback: ethereum

  10. Pingback: bitsler forum


  12. Pingback: bitsler dice

  13. Pingback: watch ncis online free

  14. Pingback: PWC Tigershark Motor Mounts

  15. Pingback: personalised birthday balloons

  16. Pingback: watch movies online free

  17. Pingback: watch game of thrones online free

  18. Pingback: bitsler dice

  19. Pingback: bitsler dice

  20. Pingback: breast cancer present

  21. Pingback: radiotherapy

  22. Pingback: donate car charity

  23. Pingback: donate your car to charity

  24. Pingback: Website Creators

  25. Pingback: Content Management Systems

  26. Pingback: business web design

  27. Pingback: small business logo design

  28. Pingback: donate a car for cash

  29. Pingback: best place to donate car for tax deduction

  30. Pingback: Website Creators

  31. Pingback: web design company

  32. Pingback: donate car kidney foundation

  33. Pingback: donating vehicles for tax deduction

  34. Pingback: design services

  35. Pingback: Crowdfunding Press

  36. Pingback: Search Engine Optimization

  37. Pingback: Search Engine Optimization

  38. Pingback: web page design

  39. Pingback: duct cleaning truck

  40. Pingback: response web design

  41. Pingback: air conditioner repair contractors

  42. Pingback: contacting us

  43. Pingback:

  44. Pingback: dumpster service

  45. Pingback: branding


    Does your blog have a contact page? I’m having problems
    locating it but, I’d like to send you an e-mail. I’ve got some ideas for your blog you might be interested in hearing.
    Either way, great website and I look forward to seeing it expand over time.

  47. Pingback: rent a garbage dumpster

  48. Everett

    Hello, just wanted to tell you, I loved this article. It was practical.
    Keep on posting!

  49. Pingback: rent dumpster prices

  50. Pingback: buy water softeners

Leave a Comment

Your email address will not be published. Required fields are marked *