SiteCheck Signatures

  1. Home
  2. Signatures
  3. SiteCheck Signatures
  4. malware.script_base64

malware.script_base64

Description:
Scripts that use a suspicious trick of specifying the script code as base64 encoded value of the script's src parameter.

Here's how such scripts may look like:

<script src="data:​text/javascript;​base64,ZG9jdW1lbnQud3JpdGUodW​5lc2NhcGUoJyUz...skipped...3NCUzZScpKTs="></script>

Affecting: Any web site (no specific target).