Stepping Through JavaScript Obfuscation

The report analyzes an instance of malicious IFRAME injection on a reputable website by demonstrating how obfuscated JavaScript (a long hex-encoded string decoded two characters at a time) can be deobfuscated to reveal the embedded iframe payload; the author walks through renaming functions, adding whitespace, and converting hex pairs to ASCII to show that JavaScript obfuscation is surmountable for analysts.