Tag Archives: incognito

Reversing the Incognito Exploit Kit

Posted on June 4, 2011 by darryl

Looks like Incognito got updated yet again. Let’s reverse the Javascript exploit code… First let’s clean this up (the complete script is here)! You can see it’s now using p, div, and span tags to hold the obfuscated code which … Continue reading →

Posted in Exploit Packs, Malscript | Tagged , , , , , , | 5 Comments

Incognito Exploit Kit Redux

Posted on March 7, 2011 by darryl

After posting the previous article on Incognito, I was told by a couple of people that this was an older version (many thanks guys). I have been tracking that exploit kit for awhile and never got around to posting an … Continue reading →

Posted in Exploit Packs, Malscript | Tagged , | Leave a comment

Incognito Exploit Kit

Posted on February 25, 2011 by darryl

Incognito is a relatively new exploit kit. It uses the following Javascript code to perform its drive-by downloads. Let’s take a closer look at the obfuscated Javascript. As you can see, it’s using arrays like crazy. There are three functions. … Continue reading →

Posted in Exploit Packs, Malscript | Tagged , , , | 4 Comments