Don’t move - or I’ll redirect!

CloneRanger · Jul 3, 2010

Search engine optimisation (SEO) techniques have received a fair amount of attention recently, thanks mostly to their use in fake AV distribution. In this blog, I will describe an interesting piece of JavaScript I came across whilst investigating some SEO pages.

*

As you can see, the redirection is a little more obscure than the usual simplistic location.href=_some_url_! The script adds an event listener to the document using addEventListener or attachEvent for Mozilla et al. and IE respectively.

Upon the mousemove event firing, the exit() function is called, incrementing a counter. Once that counter hits 3, an anchor element is added to the page, and the redirection is delivered. A curious exercise in making the simple overly complex and cumbersome! Seems like the use of “hiding in plain sight” tactics in an attempt to evade detection.
Click to expand...

http://www.sophos.com/blogs/sophoslabs

Cudni · Jul 3, 2010

Nice things can be done with Java script as well as bad. Always better to keep it disabled on all sites except Trusted to reduce the possibility JS being used for bad purpose

Dude111 · Aug 3, 2010

I tihnk these days MORE BAD IS DONE than good...

I always try and keep it disabled!! (Unless i goto a site that wont work w/o it (but i try and avoid them))

Log in or Sign up

Don’t move - or I’ll redirect!

CloneRanger Registered Member

Cudni Global Moderator

Dude111 Registered Member

Log in or Sign up

Don’t move - or I’ll redirect!

CloneRanger Registered Member

Cudni Global Moderator

Dude111 Registered Member

Useful Searches