This looks like real trouble.
Malignant Javascript Evades Detection
Matthew Broersma, Techworld Fri Aug 3, 10:00 AM ET
Hackers have hit on a new technique for invading desktop computers via compromised websites, while avoiding anti-virus detectors, according to the SANS Institute.
SANS' Internet Storm Center (ISC) said on Thursday it has come across the attack on a compromised website, where an iframe was used to deploy various pieces of malicious code via Javascript. Iframes allow content from one website to be embedded in another website.
This technique in itself isn't new, but researchers found that the server deploying the malicious Javascript was heavily modifying it-- "obfuscating" it-- so as to be undetectable by antivirus detectors, the ISC said. Moreover, the obfuscations were generated randomly and on the fly, according to ISC handler Bojan Zdrnja. More...
Malignant Javascript Evades Detection
Matthew Broersma, Techworld Fri Aug 3, 10:00 AM ET
Hackers have hit on a new technique for invading desktop computers via compromised websites, while avoiding anti-virus detectors, according to the SANS Institute.
SANS' Internet Storm Center (ISC) said on Thursday it has come across the attack on a compromised website, where an iframe was used to deploy various pieces of malicious code via Javascript. Iframes allow content from one website to be embedded in another website.
This technique in itself isn't new, but researchers found that the server deploying the malicious Javascript was heavily modifying it-- "obfuscating" it-- so as to be undetectable by antivirus detectors, the ISC said. Moreover, the obfuscations were generated randomly and on the fly, according to ISC handler Bojan Zdrnja. More...
