logo

The DOM Based JavaScript Obfuscation Found In EK’s

ID: fafb56a5-7ebf-5c0f-88f4-f19ec408c6a8

STIX ID: report--fafb56a5-7ebf-5c0f-88f4-f19ec408c6a8

Feed Name: Zscaler Security Research Blog

Threat Score
60/100

Date Published: 2025-04-02

Date Updated: 2026-05-01

...
...

This blog analyzes how modern exploit kits (Rig and Fiesta) use DOM-based JavaScript obfuscation to hide exploit payloads and demonstrates a simple DOM-walking deobfuscator that extracts the de-obfuscated JavaScript (including Java, Flash, and Silverlight exploits) from the DOM for rapid analysis.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.