Tag Archives: javascript

Deobfuscating the Facebook Spam Script

Posted on May 12, 2011 by darryl

The latest Facebook spam Javascript code was sent to me. Apparently there are two versions, one was obfuscated while the other wasn’t. Lucky me, I get the obfuscated one! My first thought was “wow, nice obfuscation but should be easy … Continue reading →

Posted in Malscript | Tagged , , , , | 10 Comments

New Exploit Kit - EgyPack

Posted on May 5, 2011 by darryl

First off, many thanks goes out to Paul for doing all of the legwork on this new discovery! A new pack has emerged called EgyPack. The malicious link points to, what looks like a JPEG file (careful, it may still … Continue reading →

Posted in Exploit Packs, Malscript | Tagged , , , | 2 Comments

Malscript on Compromised Site

Posted on April 29, 2011 by darryl

From the looks of it, the catholic.org site appears to have been compromised in some way. There is obfuscated Javascript buried in the webpage that points to a malicious domain. Thank goodness that the malicious domain no longer resolves so … Continue reading →

Posted in Malscript | Tagged , | 1 Comment

Impressive Javascript Encoder

Posted on April 27, 2011 by darryl

There are many online Javascript encoder sites that enable you to obfuscate your Internet link or email address. Most of the Javascript encoders that I’ve seen don’t pose much of a challenge and are really easy to reverse. I recently … Continue reading →

Posted in Tools | Tagged , , , | 3 Comments

Javascript Obfuscation Using Colors?

Posted on April 1, 2011 by darryl

No, not at all but the Javascript code does look like it’s just trying to process hexadecimal representations of various colors. Let’s take a closer look at the script: If this was found on a webpage, you might just overlook … Continue reading →

Posted in Malscript | Tagged , | Comments Off