-
Recent Posts
Recent Comments
Archives
- October 2016
- September 2016
- June 2016
- February 2016
- January 2016
- November 2015
- October 2015
- July 2015
- June 2015
- March 2015
- February 2015
- December 2014
- November 2014
- October 2014
- September 2014
- August 2014
- July 2014
- June 2014
- May 2014
- April 2014
- March 2014
- February 2014
- January 2014
- December 2013
- November 2013
- October 2013
- September 2013
- August 2013
- July 2013
- June 2013
- May 2013
- April 2013
- March 2013
- February 2013
- January 2013
- December 2012
- November 2012
- October 2012
- September 2012
- August 2012
- July 2012
- June 2012
- May 2012
- April 2012
- March 2012
- February 2012
- January 2012
- December 2011
- November 2011
- October 2011
- September 2011
- August 2011
- July 2011
- June 2011
- May 2011
- April 2011
- March 2011
- February 2011
- January 2011
- December 2010
- November 2010
Categories
Meta
Tag Archives: javascript
Converter Updated
The latest version includes several new features which I’d like to highlight here: Enhanced Range Search/Replace The feature can be found by going to this menu item under Tools: You can now add incrementers as a text replacement as seen … Continue reading
Posted in Malscript, Tools
Tagged converter, deobfuscation, exploit kit, javascript, microsoft script encoder, sundown
Comments Off on Converter Updated
Revelo Updated
A colleague of mine received the following email in their Gmail in-box and wondered how it got past their filters and what it does. What almost tricked him was the fact that it called out his name. Only after looking … Continue reading
Posted in Malicious Email, Malscript, Tools
Tagged deobfuscation, javascript, revelo
Comments Off on Revelo Updated
Not A Very Nice Pack
Someone just rigged an unsubscribe page with a Nice Pack drive-by! How cruel is that?! At least this gives us another reason not to click on links in email, even if it is to opt-out. Here’s the unsubscribe page: And … Continue reading
Posted in Exploit Packs, Malscript
Tagged deobfuscation, exploit kit, javascript, nice pack
1 Comment
Analyzing a New Exploit Pack
A new exploit pack has recently appeared and is getting a decent amount of drive-by traffic. This pack employs several exploits and includes two different social engineering ploys so there’s something for everyone. This pack can be primarily found on … Continue reading
Posted in Exploit Packs, Malscript
Tagged deobfuscation, exploit kit, javascript, kein exploit pack
2 Comments
Playing Hide and Seek with Malicious Scripts
When I encounter a drive-by download that involves a compromised host, there will usually be a malicious script somewhere on the website. The “malicious script” could be a meta refresh tag, an iframe, an external Javascript file, or even in … Continue reading