Trends in Web Threats in CY Q2 2022: Malicious Java Script Downloaders Are Evolving
Summary: Palo Alto Networks' Advanced URL Filtering detected 751,331 malicious landing URL incidents between April and June 2022, of which 253,644 were unique, up from 577,275 total and 116,643 unique in Q1. It also detected 1,744,629 malicious host URL incidents, with 256,844 unique URLs - a 42% rise in unique hits over the prior quarter - and the most active threat type was JavaScript downloaders, including one family injected through a popular content management system that grew from unobfuscated to CharCode- and eval-obfuscated code and infected around 300 domains.
Key Takeaway: A single JavaScript downloader family drew roughly 5,000 customer hits and spread across about 300 domains in one quarter by adding obfuscation layers, so signature-based detection tuned to its earlier, plainer form would have missed the newer variants.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026