Poor Websites Infected with Malicious JavaScript Code

Zscaler researchers discovered that the BSNL Bangalore telecom website was compromised: attackers injected six different obfuscated JavaScript snippets into the site's search.js which, when the site search was used, redirected users to the Gumblar botnet domain gumblar.cn. The post includes decoded examples, explains the infection vector, notes other Indian sites previously affected, and states that Zscaler blocked the infected page and the malicious domain has since been taken down.