Websense identifies Halloween malware infections

News by SC Staff

Halloween provided extra scares as some sites were compromised with malware

Halloween provided extra scares as some sites were compromised with malware.


Websense Security Labs ThreatSeeker Network discovered that numerous Halloween-themed Web sites were compromised leading up to and during the festival. 


The company identified one costume website which showed that the JavaScript had multiple-layers of obfuscation and the script contacts a malcious server in the .biz TLD. Websense claimed to have seen almost ten thousand sites infected with the same obfuscation technique


A US retailer used the Halloween theme to promote its products, however its website was infected with a redirection that pointed to a gpack exploit kit. The ThreatSeeker network is currently tracking over thirteen-thousand sites infected with these patterns.


Finally Websense identified malware authors who have recently registered proxy websites that are using the Halloween theme to allow users to bypass traditional URL filtering solutions.


Find this article useful?

Get more great articles like this in your inbox every lunchtime

Upcoming event 

Webcast: Understanding this year's biggest adversaries - and how to combat them 

Nation-state activity, versatile, slippery strategies and Big Game Hunting - the threats are real, dangerous and ever changing. 
Brought to you in partnership with Crowdstrike