JavaScript Code Hidden in Image

We noted few websites infected with the following code (Gumblar-style?):

Image

Extracted malicious URL:

hxxp://vohfakai .co.cc/1584179.jpg

URLVoid report:

http://www.urlvoid.com/scan/vohfakai.co.cc

Unfortunately (fortunately) the malicious URL is not online, but I am sure it was used to spread malicious javascript code or iframe code, that would have redirected the users to an exploit kit.

Random Posts

Previous Posts