Home Testimonials Company Support 1–888–873–0817
PRICING SUPPORT LOGIN
Home Notes Malware Signatures About

Malware entry: spam-seo.hidden_content.70

Description: A block of links and a script that makes them invisible.

Here's how it usually looks like

<div id="liangfeng">
...links here...
<scri​pt>
eval​(function(p,a,​c,k,e,d){e=​function(c){return(c<a?"":e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c​+29):c.toString(36))};...skipped...split('|'),0,{}))
</​script>
</div>
The script decodes to this
document.getElementById("liangfeng").​style["display"] = "none";
which makes the links invisible.



Affecting: Any web site (no specific target).

For all our web-based malware signatures, go here: http://labs.sucuri.net/?malwaredb