Monthly Archives: August 2009

Javascript hiding in CSS files

Posted on August 30, 2009 by Oliver Day

We see a lot of fun hiding spots for javascript at the StopBadware office as we process webmaster appeals.  Last week we realized something that the Matasano team stated in their recent blog entry for their new testing tool: debugging … Continue reading →

Comments Off

Google Timer objects showing up in attack code

Posted on August 30, 2009 by Oliver Day

I have been seeing more attack javascript using google timer objects.  I’m not sure if this is to improve the reliability of the exploit but it is an interesting signature of the code.  I’ve included a sample below (spaces added): … Continue reading →

Tagged , | Comments Off

Recent web attack flawed, reducing effectiveness

Posted on August 28, 2009 by Maxim Weinstein

Mary Landesman at ScanSafe recently reported a script injection attack, and Ryan Naraine picked up the story over on the Zero Day blog. While the initial report describes 55,000 web pages (not web sites as the Zero Day post states) … Continue reading →

Tagged , | Comments Off

Google sees increase in detections

Posted on August 27, 2009 by Maxim Weinstein

Niels from Google’s security team posted some updated detection stats over on the team’s blog: As we mentioned in our Top-10 Malware Sites blog post, we have seen a large increase in the number of compromised sites since April. The … Continue reading →

Tagged , | Comments Off

Internship opportunities

Posted on August 24, 2009 by Maxim Weinstein

We are looking for interns to work in our office in Cambridge, MA. We have a couple openings for website testers to evaluate sites for badware code (JavaScript knowledge required), and another opening for someone interested in conducting a research … Continue reading →

Tagged , | Comments Off