Enthusiasts researchers develop technology to detect harmful JavaScript code

12:50  21 october  2021
12:50  21 october  2021 Source:   silicon.de

Solar Cells: New Material Mix ensures a thousandfold Power

 Solar Cells: New Material Mix ensures a thousandfold Power researchers: inside the University of Halle-Wittenberg present promising results: The connection of three crystal layers the photovoltaic effect could be significantly increased. © Anatoliy_Gleb / Shutterstock Solar cells: New material mix ensures a thousand-fold Power even if the German solar industry had a trailer a trailer in the meantime, photovoltaics are still considered an important building block on the way to reducing the CO2 emissions.

Sicherheit (Bild: Shutterstock) © default_credit Security (Image: Shutterstock) You analyze the functions of Packers for JavaScript. Thus, cybercriminal harmful code for phishing websites and malware dropper. Based on the functions created profiles recognize at least 25 percent of the camouflaged harmful code.

researchers of Akamai have developed a new technique to improve the detection of harmful JavaScript code . They try to solve the problem that more than 25 percent of the harmful JavaScript code is hidden today in so-called Packers. They allow attackers to avoid signature-based malware detection.

Packer Compress and encrypt the JavaScript code to make it unreadable and prevent debugging. However, JavaScript packers are not a new threat. As they are generally used as an alternative to JavaScript libraries to reduce the traffic caused by websites, they have been known since 2008 as a potential hiding place for harmful code.

Volkswagen Atlas 2022

  Volkswagen Atlas 2022 Pros Abundant cargo space Roomy third row New standard features Cons Unrefined transmission Poor body control Suboptimal fuel economy The Atlas is the largest Volkswagen ever made and was built specifically to meet the needs and wants of buyers in the United States. The Atlas entered the market in 2017 as a 2018 model-year vehicle and just received a refresh for the 2021 model year, which touched up the front and rear bumpers and added new tech. Then, VW updated the Atlas again with a 2021.5 designation. Volkswagen offers the Atlas with seating for up to seven.

According to Akamai, camouflaged JavaScript code is used by cybercriminals for phishing websites, malware dropper or fraud meshes such as Magecart attacks on online payment systems. The new technique for detecting harmful JavaScript code will now want to introduce researchers on the Security Conference Sector 2021 in November.

In advance, Akamai informed that detection in the future should be based on special functions of the packer. Instead of using a signature or hash value, techniques used by the packer are intended to expose the harmful code.

To develop the new technology, Akamai has examined four parts of JavaScript code on four non-associated malicious files. Two of the code snippets were intended for phishing, one was a malware drop and the fourth a magecart malware. "These four examples are the result of the same unique packer functionality used to obscure any JavaScript code," explains Akamai.

By creating profiles from packers and their functions, the researchers then evaluated 30,000 benign and malignant JavaScript files. At least 25 percent of malicious files have used one of the five previously defined packer functions.

Akamai also points out that the camouflage of code itself is not a clear signal for harmful code. For a more accurate distinction of harmful or harmless camouflaged JavaScript code, mechanical learning is needed.

Ignite 2021: Excel gets new JavaScript API for Custom Data Types .
© Provided by Dr. med. Windows Excel logo The work with different data types has long been one of the most central functions of Microsoft Excel. For developers, the RedMonders at Ignite 2021 now announced more freedom when it comes to Custom Data Types. A new JavaScript API makes it possible, but also for the developers of add-ins there are innovations.

usr: 0
This is interesting!