3 ms·
Once a buddy and I reverse engineered some JS on a site that did the same thing - sent you down one rabbit hole, more obfuscated code, etc.. etc.. we eventually
by roflyear 4y ago
Once a buddy and I reverse engineered some JS on a site that did the same thing - sent you down one rabbit hole, more obfuscated code, etc.. etc.. we eventually got to the end of it and discovered a comment:
// help my name is ###
// i am being held at #### (address in china)
// please contact my family ###
(this was in chinese, we had to translate it)
Scary!
- lgessler 4y agoSo did it seem like some kind of weird scam, or what?
- dane-pgp 4y agoPresumably it's to trick whitehats into tipping off the hackers that their code was being analysed and had been successfully deobfuscated, so the hackers knew they needed to move to a different attack. It's actually quite devious, like a reverse honeypot that the bad guys use against the good guys, exploiting their empathy.
- roflyear 4y agoThat would be clever!
- roflyear 4y agoNo, maybe a joke? Or serious...