Many Websites Infected with Malicious Hidden Iframes

This report documents a malicious IFRAME injection on a compromised website where attackers used publicly available Base64 JavaScript (webtoolkit.base64.js) and added eval/obfuscation to hide a redirecting IFRAME; decoding with Malzilla revealed the hidden iframe and VirusTotal shows many vendors fail to detect the script, underscoring a persistent web-based malware delivery technique and detection gap.