This malware category is related to client-side malicious scripts. There are many ways to hide such malicious scripts from webmasters.
One of them is using the "behavior" CSS property that allows to load "behaviors" (script) from a URL. This way you can hide the injected script
in the style section of the HTML or in the .css file - both locations are usually overlooked when people search for malicious code.
Affecting
Any website
Cleanup
Find all infected files and remove the malicious code. Don't forget to check .css files and style section of web pages.
You can sign up with us and let our team remove the malware for you.
Dump
...example of the attack..
<style type="text/css">
body{ behavior: url(/malicious.htc) }
</style>