Random JS Trojan infected 10,000 sites in December

Tuesday, 15 Jan 2008. Categories: USA

Over 10,000 trusted web sites are thought to have been infected with malware last month using the Random JS Trojan toolkit, it has been claimed.

The RandomJS, which is capable of stealing users’ documents, information about surfing habits and passwords, is thought to have evaded detection for much of this time thanks in part to the variety of methods it uses to disguise itself.

This makes detection with standard signature-based anti-malware products much more difficult, according to industry experts.

Ben-Itzhak, chief technology officer of Finjan, which named the malware, said: "Signaturing a dynamic script is not effective. Signaturing the exploiting code itself is also not effective, since these exploits are changing continually to stay ahead of current zero-day threats and available patches.

"Keeping an up-to-date list of 'highly-trusted-doubtful' domains serves only as a limited defense against this attack vector."

He added: "Studies in mid-2007 showed nearly 30,000 infected web pages being created every day."

PC Tools, Experts in Internet Security and trusted by millions worldwide! Visit www.pctools.com to upgrade your protection.

Protection Products

Performance Products

Random JS Trojan infected 10,000 sites in December

Related News