Massive Admedia/Adverting iFrame Infection http://hubs.ly/H01_MTP0 by @unmaskparasites #iframe #malware #injectionpic.twitter.com/6z6Zf6Ha6Z
-
@bartblaze Hashes of what? The script changes from site to site, so do the iframe URLs
@unmaskparasites The decoded admedia script - the only change there is the iFrame URL. In other words: if you can share a copy of a script?
-
-
@bartblaze Here are multiple decoded versions of the script http://pastebin.com/RfMiE6Vh and a sample of an infected .js http://pastebin.com/00tzPsbN -
@unmaskparasites Thanks Denis, appreciated!
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.