Page 1 of 1

Weird Javascript in Contextual Menu

Posted: Wed Apr 14, 2010 6:15 pm
by a
Image

when visiting hxxp://www.redtigersecurity.com/forum/

Re: Weird Javascript in Contextual Menu

Posted: Wed Apr 14, 2010 6:52 pm
by Giorgio Maone
The site has been infected with multiple injections.
Some of them are inserted at the wrong position, creating malformed <script> elements which cause NoScript to display those "strange" sources.
Notice that allowing them won't do anything, while allowing "mainnetsoll.com" is extremely dangerous, since it appears to be the malicious site serving the attack payload.

Re: Weird Javascript in Contextual Menu

Posted: Thu Apr 15, 2010 3:31 am
by Alan Baxter
Giorgio Maone wrote:allowing "mainnetsoll.com" is extremely dangerous, since it appears to be the malicious site serving the attack payload.
Avast 5 is blocking "mainnetsoll.com" as malware. :D