Antivirus Struggling With Obfuscated JavaScript
ID: 1dcafe4c-8912-5c37-8bc6-d39a66d0e35c
STIX ID: report--1dcafe4c-8912-5c37-8bc6-d39a66d0e35c
Feed Name: Zscaler Security Research Blog
This analysis outlines how antivirus engines relying on static signatures misclassify benign obfuscated JavaScript (illustrated by an About.com APR calculator script flagged by 18 of 41 engines), concluding that inspecting obfuscated code without de-obfuscation leads to false positives and recommending better de-obfuscation or heuristic approaches.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.