Security Best Practice: Protect Yourself from Javascript Character Manipulation Obfuscation (Fragus)
| Check Point Reference: | SBP-2011-08 | |
| Date Published: | ||
| Severity: | ||
| Source: | Exploit Pack |
|
| Protection Provided by: |
Security Gateway
|
|
| Who is Vulnerable? Web browsers | ||
| Vulnerability Description Exploit packs, such as Fragus, are toolkits used by cybercriminals to easily snare victims for their botnets. Solutions enabling security product bypass are often integrated within such tools. |
||
|
Vulnerability Details Although various security products provide coverage against many web vulnerabilities, such as ActiveX exploits, these known exploits could potentially bypass security products by using JavaScript obfuscation techniques. Several known JavaScript character manipulation techniques obfuscate known exploits so they will bypass security rules - since the exploits are being thoroughly obfuscated, IDS and IPS systems will not recognize them and thus will allow them to pass without any notification. |
Protection Overview
This protection will detect and block Fragus based attacks which use the JavaScript character manipulation obfuscation.
To configure the defense, select your product from the list below and follow the related protection steps.