VISimulator.com has been comprimised
I’m an old vi hound, so I turned on the VISimulator plugin. Actually, I’m older than that, I’m used to the line addressing in vi that is based on ed and sed. So I thought to try a few global replacements from the old days -
and got nowhere.
So then I tried
for the heck of it, and find that reliably calls a trojan popup in Chrome.
With the new Malwarebytes running, it’s showing that I’m redirected to http://VISimulator.com and that in turn is calling a round-robin of nasties adaptively as I block them.
Both 32 and 64 bit version are provided.