As cited
Copy frozen at (site build).
threat intel
A polymorphic phishing page (that occasionally breaks itself)
No summary had been written when this copy was frozen.
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
A polymorphic phishing page (that occasionally breaks itself)
A researcher discovered a polymorphic phishing page that generates unique variants on each request to evade static detection signatures. The first page variant loaded contained a JavaScript obfuscation bug: two functions shared an undeclared global loop counter variable, causing the decoding routine to loop infinitely and freeze the browser. Subsequent requests produced functionally identical credential-stealing pages with different obfuscation, variable names, and HTML structure, though approximately 3.5% of variants suffered from the same scope bug and failed to render.
Why it matters: Phishing operators and security teams should understand that polymorphic obfuscation raises detection costs but introduces implementation risks; developers need awareness of variable scope rules to avoid introducing bugs that inadvertently break malicious payloads.
- Source published
- First seen by Cybersecurity Tracker