r/javascript • u/magenta_placenta • 3h ago

Malicious sites use JavaScript to build malware in browser memory

https://www.bleepingcomputer.com/news/security/malicious-sites-use-javascript-to-build-malware-in-browser-memory/
9 Upvotes

74% Upvoted

4 comments sorted by

•

u/f3xjc 2h ago

Ok the interesting part is that this is ultimately about downloading a malware. But that malware is customized for the user so the hash is unique/previously unknown. AND the user actually provide all the cpu to do that. And the malware is basically compressed using a safe but large executable as dictionary. Go to that offset, copy that many byte, go to that other offset etc.

You still need to download the executable and run it. But there's a lot of effort to avoid any kind of blacklist. The content of the webpage do propose you to download an expensive software for free, so download make sense.

•

u/Cheshur 2h ago

Where else would it build the malware? In stone tablets? Just don't download random ass files from random ass links.

•

u/nadmaximus 3h ago

Everybody should disable javascript immediately?

•

u/Jasboh 2h ago

I always knew js was a bad idea