Bleeping Computer

Stealthy new JavaScript malware infects Windows PCs with RATs

A new stealthy JavaScript loader named RATDispenser is being used to infect devices with a variety of remote access trojans (RATs) in phishing attacks. The novel loader was quick to establish ...
FinanceFeeds

Shai Hulud Malware Hits 400+ JavaScript Packages in Major NPM Supply-Chain Attack

Charlie Eriksen, a researcher at Aikido, identified the infected libraries and confirmed each detection manually to minimize ...
Morningstar

Introducing Chainguard Libraries for JavaScript: Malware-Resistant Dependencies Built Entirely from Source

The risk in the JavaScript ecosystem isn't theoretical: earlier this month, a number of packages used by millions of developers were compromised via malicious code. These malware attacks against ...
Infosecurity-magazine.com

Obfuscated Javascript malware making a comeback

Obfuscated (hidden) Javascript attacks were popular among criminal hackers a couple of years ago, and were widely reported by several vendors, who developed heuristic scanning solutions to counter the ...
Dark Reading

JavaScript Malware Strikes Firewalls

2:00 PM -- In the beginning, there was application security. All ports were open to the world and practically every application had holes in it. It was like the Wild West. Eventually application ...
Threat Post

Click-Fraud Malware Spreading via JavaScript Attachments

The SANS Internet Storm Center reports a rash of malicious spam pushing Kovter click-fraud malware. A new malware campaign has been spotted that has begun seeding spam messages with a downloader ...
ZDNet

JavaScript encryption added to malware arsenal

VANCOUVER, BC -- Malicious hackers are starting to encrypt JavaScript files to escape anti-virus detection, adding another element of sophistication to browser-based malware attacks. But, according to ...
Nextgov

Stealthy Tool Detects Malware in Javascript

Get the latest federal technology news delivered to your inbox. The tool runs in the Chrome browser and is designed to detect malicious programs that are capable of evading existing malware detection ...
Bleeping Computer

Duri campaign smuggles malware via HTML and JavaScript

A new attack campaign uses a combination of HTML smuggling techniques and data blobs to evade detection and download malware. Dubbed Duri, the campaign exploits the JavaScript blob method which ...
PC World

Gmail will block JavaScript attachments, a common source of malware

Starting Feb. 13, Google will no longer allow JavaScript attachments on its Gmail service, killing one of the main methods of malware distribution over the past two years. Users will no longer be able ...