You Are An Idiot, also known as Offiz (according to Kaspersky) and Trojan: JS/NoBrain is a trojan website and a successor of Joke: Win32.Idiot. However, this malware will not delete any files, The site tries to act like a fork bomb. Today, the fork bomb payload does not reach out in the wild as it did in the past due to the JavaScript code that leads the windows to bounce around the screen is removed
The new domain for the website is youareanidiot.org, created in 2004 by Andrew Regner. The animation comes from youdontknowwhoiam.com in 2002.
You Are An Idiot is a site that displays an animated film featuring 3 smiley faces on a strobe background and a text stating that: “you are an idiot!”, followed by a choir singing “You are an idiot! ha ha ha ha ha ha ha”, Note that the exclamation point is small enough that it is barely visible without zooming in, the website is displayed like this
You Are An Idiot
You Are An Idiot was the original and first version of the virus. When opened and closes the browser, the site will spawn 6 additional windows to make the choir loudly sing: “YOU ARE AN IDIOT” to the user, if they managed to close one, the browser will duplicate.
Trying to open Task Manager or close one using Alt+F4 doesn’t work, instead, it displays a dialogue box stating that the user is “an idiot!”, and clicking OK or the x button closes the window if the user is smart enough to know that restarting their computer actually works or using Task Manager before the payload comes.
In the newer version, yes, of course, the website only displays an animated film and the payload was removed, When trying to access the older version in Wayback Machine, there is a small chance that can duplicate the browser and a large chance that can only spawn 1 window, since major browsers like Google Chrome can easily block the pop-ups away.
You Are An Idiot 2
The unofficial sequel to the “trojan” created by Computer Virus Watch in 2013, the objective of this threat is to demonstrate how the original malware exploits vulnerabilities in the system, The threat’s code was removed from the website on the same period, but was later recreated and modified in two different websites and it is now a cross-platform.
YouareanIdiot.cc
YouAreAnIdiot.cc is an attempt recreation of the website created by EnderManch, As mentioned earlier, since Major browsers has good protections, they can easily deal with the pop-ups, it was later parked.
Payload
You Are An Idiot is a flashing video that consists of the following text in the Times New Roman font. Note that the exclamation point is small enough that it is barely visible without zooming in
you are an idiot!
It works via clickbait since the user would get interested in clicking the link due to reverse psychology. [1] The website would call the user an idiot.
The screen also flashes black and white while the font color alternates from white and black, causing some users to gain seizures. A choir song that sings You are an idiot! Ha ha ha ha ha ha ha ha ha ha ha ha ha! is also heard from the Flash video, annoying the user.
The flash video was originally found in youdontknowwhoiam.com which since has turned into a pornography portal. The video was then moved to YouAreAnIdiot.org circa 2004. [2] However, in 2019, the website has shut down and no longer accessible. However, it is still accessible in Wayback Machine
You Are An Idiot
You Are An Idiot was the original version of the virus. If someone went to YouAreAnIdiot.org and closed the window, 6 additional windows of the website would spawn and move across the screen, annoying the user until their computer would eventually crash from lag due to the computer running out of RAM and CPU power to keep running the browser windows. If the user managed to close one, it would spawn 6 more windows of the You Are An Idiot windows. Pressing Ctrl+Alt+Del and Alt+F4 on the keyboard wouldn’t work. Instead, it displayed a dialogue box saying You are an idiot!, and clicking OK or the X button would just close the window. They could turn it off by restarting their computer or killing the browser tasks with Task Manager.
The original name of this Trojan is named Trojan.JS.Offiz according to the antivirus program, Kaspersky.
Today, the website only just plays the video and does not open up any other windows anymore. However, the site was revived in two different web addresses with the code slightly modified. Older versions of the website can also be found on the Wayback Machine. If the user tries using it on The Wayback Machine today, there’s a small chance it will duplicate, and a large chance only 1 window will bounce around.
Description
In Internet Explorer, Google Chrome, Firefox, and Opera browsers without the popup blocker, when the website is visited, the malware shows a big window that flies over the user’s screen, singing that the user is an idiot to pay attention. When the window is closed, it opens 6 more windows to spam the user’s computer, and they open the same page, which sings the same You Are An Idiot! song and would fly over the screen, as opposed to the original version. However, this usually can break out into a big pile of error messages.
If the user’s version of Internet Explorer is lower than 6.0, the threat sets the user’s homepage to its own website. The threat will not work on newer versions, Chrome, Firefox, Microsoft Edge, or other desktop browsers unless its popup blocker is completely disabled, excluding IE versions newer than 6.0.
