Infected Javascript File

The report details instances where attackers append obfuscated malicious JavaScript to legitimate site files (including a case on an Indian telecom website), describes deobfuscation and linkage to the malicious domain gumblar.cn, and explains that hijacking static files typically requires higher-level access (e.g., remote file inclusion, privilege escalation or access via SQL injection) compared to simple dynamic-page injections.