Hackers are even more dangerous with new attacks

Security experts have warned of a way to embed dangerous JavaScript code on websites of online criminals and hackers.

Dan Hubbard, director of research and security at Websense, said in the past few weeks there has been a " new generation " of JavaScript code - called JS / Wonka - that is spreading strongly, especially Since the end of September, there have been about 10,000 websites using the same method of embedding JavaScript code of this type.

This fact makes us realize that online hackers and criminals are trying to hide dangerous JavaScript code. They want Internet users and even managers who run websites cannot see these types of code.

JS / Wonka has the function of converting characters to Unicode values. Usually JavaScript does this work automatically, so the implementation of this method is a pretty easy task that doesn't require a lot of skills.

JavaScript codes are often hidden in IFRAMEs that define zero values ​​to avoid prying eyes. Meanwhile Internet Explorer has a few IFRAME errors that have not been patched to date and become a tool for hackers to exploit.

However, Internet Explorer is not the only browser subject to JS / Wonka attack, but other types of browsers such as Firefox have similar errors.

Up to half of 10,000 websites with JS / Wonka embedded are discovered by Websense as websites hijacked by hackers or dangerous websites that spread malicious software or spyware message.

HVD - ( Techweb )