Tag Archives: obfuscated javascript

Two Drive-Bys, One Site

Posted on October 27, 2011 by darryl

It’s bad enough to get hit with one drive-by download…but two on one page?! It’s probably separate compromises made by two different people. One thing is for sure though…what’s common to all these websites is WordPress. Let’s take a look … Continue reading →

Posted in Exploit Packs, Malscript | Tagged , , | 1 Comment

Neosploit is Back!

Posted on October 26, 2011 by darryl

After a long hiatus, it appears that Neosploit may have come back to life! While the code has some slight changes, it functions similarly to previously known versions of Neosploit so it’s doesn’t look like a major upgrade. I just … Continue reading →

Posted in Exploit Packs, Malscript | Tagged , | Leave a comment

Elaborate Black Hole Infection

Posted on October 22, 2011 by darryl

I normally come across straight-forward drive-by downloads. Due to some website compromise, a web page is modified to include a link to a malicious website (e.g. iframe or external Javascript file) that infects unsuspecting visitors. In this case, the infection … Continue reading →

Posted in Malscript | Tagged , , | Leave a comment

A Tricky Obfuscated JavaScript

Posted on August 26, 2011 by darryl

A reader sent in obfuscated Javascript code that he needed some help to decipher. I’m sure he was very close to solving it but it looked interesting enough that I thought I would have a go at it and detail … Continue reading →

Posted in Malscript | Tagged | 2 Comments

Hacking Magazine Hacked

Posted on August 17, 2011 by darryl

One of my favorite hacking resource site appears to be hacked and possibly even infecting visitors. Here’s the website: And here’s the offending code in the source: The external Javascript file has obfuscated code: Let’s have a closer look at … Continue reading →

Posted in Malscript | Tagged , | 3 Comments