generic_javascript_obfuscation5 in c8n.mytrade.link

On 2020-09-03T10:58:05.277510+00:00 we found pattern generic_javascript_obfuscation5, type: Suspicious, (JavaScript obfuscation is frequently used to hide malicious code (or with hope to protect intellectual property)) in the page https://c8n.mytrade.link/web-www/_next/… referenced from https://mytrade.link/ .

Code sample:

b'["static/chunks/pages/account/redirect-pages-to-sso-5f4027e578a7817d75e9.js"],"/cart/cart-detail":[e,i,a,c,d,f,"static/chunks/pages/cart/cart-detail-fa686509f2e09fbb0878.js"],"/cart/checkout":[i,m,a,b,g,n,q,p,"static/chunks/pages/cart/checkout-9ccd6f44961b394ece21.js"],"/cart/order-confirmation":[a,"static/chunks/pages/cart/order-confirmation-c588165488491b0439a2.js"],"/cart/pay-order":[i,m,"static/chunks/d7eeaac4.ff3edfe521c4bc133359.js",a,b,g,n,q,"static/chunks/pages/cart/pay-order-c84d06ac2e9e557c546d.js' … b'["static/chunks/pages/static-page/ab-testing-demo-f6860ebb08f60d261dac.js"],"/static-page/about-us":[a,"static/chunks/pages/static-page/about-us-16e907bd71d6c936ffcb.js"],"/static-page/care-basket":[a,b,"static/chunks/pages/static-page/care-basket-8146d9034d80de49f600.js"],"/static-page/care-basket-confirmation":[a,"static/chunks/pages/static-page/care-basket-confirmation-44f81da33ca144898f62.js"],"/static-page/careers":[a,"static/chunks/pages/static-page/careers-4afc66cc010f97dde5d5.js"],"/static-page/cont' … b'["/404","/_app","/_error","/account/local\xc3\xa2\xc2\x80\xc2\x93dummy-login","/account/redirect-pages-to-sso","/cart/cart-detail","/cart/checkout","/cart/order-confirmation","/cart/pay-order","/cart/payment-status","/catalog/category-child-landing","/catalog/category-list","/catalog/category-parent-landing","/catalog/product-keyword-search","/catalog/view-product","/home","/messages/contact","/static-page/ab-testing-demo","/static-page/about-us","/static-page/care-basket","/static-page/care-basket-confirmation","/static-pag'

This feature is experimental so please feel free to contact us if you feel any of the reported issues is a false positive or you want to suggest a pattern that should be detected (we are using Yara standard).

Fully automated RESTful API is now available. Subscribe for your free trial today!