Jihad Press

Some pro-Israeli websites lately been promoting a tool called “Patriot” under “Help Israel Win” slogan. According to them once you installed on your computer it will be used to attack pro-palestinian websites and etc. This raises a question how do you know that it’s not a virus or a keylogger that steals your accounts and passwords?

Why would anybody trust that website’s word that its being used to support Israel, not vise a versa ?

How do you know that its not being supported by palestinian thieves?

I deiced to run it sandboxed just in case if my antivirus does not catch it. The file itself is 232KB in size and once installed it shows a small Israeli flag in the tray bar. See screenshots.

Once sandboxed i run th process explorer and on TCP/IP tab it saw that it was reporting to “unknown243.82.200.74.defenderhosting.com”.

As you can see from the Anubis malware report “the executable reads and modifies register values. It also creates and monitors register keys” this is nothing else than a trojan packed with keylogger. Also their whois info makes me wonder what exactly their trying to say.

Website helpisraelwin.com is still online at this time

helpisraelwin.com

Whois Record

Registrant:
Ron Shalit
67 Shoshanat HaCarmel
Haifa, 34323
Israel

Domain Name: HELPISRAELWIN.COM
Created on: 09-Jan-09
Expires on: 09-Jan-10
Last Updated on: 09-Jan-09

Administrative Contact:
Shalit, Ron
67 Shoshanat HaCarmel
Haifa, 34323
Israel
972542354965 Fax –

Technical Contact:
Shalit, Ron
67 Shoshanat HaCarmel
Haifa, 34323
Israel
972542354965 Fax –

Domain servers in listed order:
NS15.ZONEEDIT.COM
NS17.ZONEEDIT.COM

The second website help-israel-win.com is taken down already.
Whois data for help-israel-win.com

In any case I would not suggest anybody to install this cr@p on their computers. There are more chances that you will hurt yourself than will help Israel.

Popularity: 4% [?]