30
30
30
JavaScript obfuscation: From party trick to phishing kit
Cisco Talos explains JavaScript obfuscation techniques used by phishing kits and the approaches researchers use to reverse them.
Cisco Talos published an educational walkthrough of JavaScript obfuscation as used in modern phishing kits. The piece covers why analysts deobfuscate malicious scripts and outlines several practical approaches to reversing obfuscated code. The techniques help defenders unpack phishing kit payloads during investigations.
30
42
42
45
30
55
60
55
42
30
45
30
57
42
30
57
47
42
30
60
60
42
30
Trends in Web Threats in CY Q2 2022: Malicious JavaScript Downloaders Are Evolving
Unit 42 detected 751,000 landing URL incidents in Q2 2022 and documented malicious JavaScript downloaders evolving to evade detection.
Unit 42 detected 751,331 landing URL incidents (253,644 unique) and 1,744,629 malicious host URL incidents (256,844 unique) from April through June 2022. Total landing URL incidents rose compared with Q1 2022, and unique host URL incidents grew 42%, indicating attackers deploying more variants. The report includes a case study of a JavaScript downloader campaign demonstrating new evasion techniques. Personal sites, blogs, and business sites were the top apparently benign entry points.
15
42
42
30
30
42
30
57
42
42
30
30
60
30