Decoding HTML Style Tag Based Malicious Iframes

This report describes an investigation into a malicious iframe injection technique where attackers embedded obfuscated JavaScript across a style tag and script to reconstruct and eval an iframe that loads malware from a remote domain; the author demonstrates step-by-step decoding and a test page to reveal the hidden iframe.