PDA

View Full Version : dynamic JavaScript obfuscation


jdh
August 1st, 2007, 09:58 PM
Raising the bar: dynamic JavaScript obfuscation

http://isc.sans.org/diary.html?storyid=3219&rss

"The reason for doing this is obvious, such heavy obfuscation makes signature based detection much more difficult, if not impossible and it wasn’t surprising to see that 0 anti-virus programs detected this when tested on VirusTotal."

The bad guys keep getting smarter. Or at least they probably figure it's worth it to hire competent software people (esp. those in bad need of a job).

DH