Adult sites are stashing exploit code inside racy .svg files

This title could be clearer and more informative.Try out Clickbait Shieldfor free (5 uses left this month).

Adult websites are exploiting SVG image files to embed malicious JavaScript code that automatically generates Facebook likes when users click on the images. Unlike traditional image formats, SVG files can contain executable code, making them vulnerable to attacks like cross-site scripting and clickjacking. The malicious code is heavily obfuscated using techniques like JSFuck to avoid detection, allowing these sites to artificially boost their social media engagement through unwitting user interactions.

2m read timeFrom arstechnica.com
Post cover image
Table of contents
Ars VideoHow The Callisto Protocol's Team Designed Its Terrifying, Immersive Audio
29 Comments

Sort: