Trojans Embedded in .svg Files
ID: 2b142c32-b53b-5ba7-b3fe-032f4dcd78c5
STIX ID: report--2b142c32-b53b-5ba7-b3fe-032f4dcd78c5
Feed Name: Schneier on Security
Threat Score
Blog post reporting that porn sites are embedding heavily obfuscated JavaScript in .svg images (via a custom JSFuck variant) which decodes into a chain of scripts culminating in Trojan.JS.Likejack; the trojan silently causes browsers of logged-in Facebook users to 'like' specified posts, a social-manipulation campaign noted as not being a new technique.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.