Almost 25% of Weaponized JavaScript Samples are Obfuscated To Evade Detection

guest · Oct 22, 2021

Almost 25% of Weaponized JavaScript Samples are Obfuscated To Evade Detection
October 20, 2021
https://gbhackers.com/almost-25-of-weaponized-javascript-samples-are-obfuscated-to-evade-detection/

After analyzing more than 10,000 malicious JavaScript samples it’s being concluded by the security analysts of Akamai that about 25% of the examined malicious samples evade detection by using JavaScript obfuscation techniques.

This immense portion clearly indicates that how rapidly threat actors are adopting obfuscation techniques to evade detection. But, for malicious purposes, JavaScript obfuscation is not solely used always.
Click to expand...

Packers
When it comes to packers, at that point it’s all about compressing or encrypting code. In short, it’s a method through which the developers compress or encrypt their code to make it unreadable or non-debuggable.

In the above image, you can see examples in which how the same unique packer functionality is used to detect and obfuscate any malicious JavaScript code.
It means if any JavaScript code serves threats such as phishing, malware droppers, or scammers then it could be easily detected by using the unique functionality of Packers.
Click to expand...

According to the report, While in the case of 20000 tp-ranked websites, this scenario totally change, since it depicts a different story, as they use obfuscation for legitimate purposes like:-

To hide some of their client-side code functionality.

Code that was obfuscated by a third-party provider.

The obfuscation of sensitive information like email addresses.

Click to expand...

Akamai: Over 25% of Malicious JavaScript Is Being Obfuscated

Research also shows that obfuscation has legitimate use cases and clearly can’t be used as a single indication for flagging malicious content.

While not considered a new technique, the use of JavaScript obfuscation indicates the continuous adoption of evasion techniques by cybercriminals. Consequently, we need to keep an eye on the threat landscape, monitoring trends and evaluating the evolution of techniques and methods being used in the wild.
Click to expand...

JavaScript Obfuscation – It’s All About the Packers

The use of JavaScript obfuscation techniques has become prevalent in today’s threats. From phishing pages to Magecart, supply chain injection to JavaScript malware droppers, they all use JavaScript obfuscation techniques on some level.

The use of JavaScript obfuscation enables evasion from detection engines and poses a challenge to security professionals, as it hinders them from getting quick answers on the functionality of the examined source code. Deobfuscation can be technically challenging (sometimes), risky (if you don’t know what you are doing), and time consuming (if you are lazy, as I am).
Click to expand...

Log in or Sign up

Almost 25% of Weaponized JavaScript Samples are Obfuscated To Evade Detection

guest Guest

Log in or Sign up

Almost 25% of Weaponized JavaScript Samples are Obfuscated To Evade Detection

guest Guest

Useful Searches