Randy on Nostr: I saw a very interesting Javascript obfuscation method being used by #Tycoon2FA this ...
Published at
2024-11-29 22:20:47Event JSON
{
"id": "fb5113fb2f5af54d7347c2febc32ab5c50504831092d5cefbe95baf603d29892",
"pubkey": "87da1263e2cd7677be738cc9726dac0f7edb27d9aa3795e39ed31925c29abe19",
"created_at": 1732918847,
"kind": 1,
"tags": [
[
"t",
"tycoon2fa"
],
[
"proxy",
"https://infosec.exchange/users/rmceoin/statuses/113568569586424434",
"activitypub"
]
],
"content": "I saw a very interesting Javascript obfuscation method being used by #Tycoon2FA this week. It got me inspired to attempt to better understand it by writing an analysis of it.\n\nhttps://rmceoin.github.io/malware-analysis/2024/11/29/tycoon1.html",
"sig": "5481d45a0aeefd9575a35f185cce7e6f147ee80061f37b52ecae9cb6b0f8a0ee9216862bfaad2fde3292e32c3291c83208b80797d2d8e2d30230c37949cfa85d"
}