[Sam]

This article was inspired by: @chekdn topic.

JavaScript.

The reason why your device can become infected just by visiting a website is JavaScript. JavaScript is still, primarily, used as a coding language in the browser. When you request a webpage you usually get an HTML file, a CSS file and a JavaScript file. The HTML describes the structure of the page. Think of it as the paragraphs, titles and sentences in an article. The CSS describes the how the page looks. Think of it as the font styles, the page styles etc. And- the JavaScript describes how you can interact with the page, it makes pages dynamic.

An example of JavaScript in Action:
Google suggestions...


JavaScript is often used to show and hide parts of a web page when users interact with it and to request information from the server without having to reload the whole page.

---

The devil in JavaScript.

The issue is that JavaScript executes without any user interaction. This is considered fine because in most cases, the JavaScript is confined to the browser. This means it should only execute while you are visiting the page from which it was downloaded from. Obviously if you are running an infected page, malicious JavaScript could steal your cookies or form data.

The problem arises when there are browser or software exploits which allow JavaScript files to be downloaded and executed outside of the browser OR if users accept to download malicious code. Hackers accomplish this by using exploit kits which look for vulnerabilities in your computer. If executed outside the browser (which it does by default) in Windows Script Host, JavaScript behaves like any normal programming language. It has access to everything on the device.




What if I disabled JavaScript?

You could! And you can even enable it for trustworthy sites. The issue is that it will definitely make your browsing experience less fun.




What if I simply stopped visiting sites that "seemed dodgy"?

That's a fair strategy and will undoubtedly reduce your risk. However, attackers can sometimes inject JavaScript into a popular webpage in what's known as a XSS (Cross Site Scripting) attack. Perhaps they inject javascript by writing it into the comments section of a blog or it could be much less noticeable e.g. by injecting a hidden html iframe which loads another site.

---

What should I do to protect myself?

Keeping this simple... You can protect yourself (for the most part) by:

1. Ensuring you have an up-to-date anti virus installed.
2. Ensuring you have an up-to-date Firewall installed.
3. Making sure your browser, OS, Java, Flash etc. plugins are all up-to-date.
4. Be smart. Don't click and open suspicious email files or links. Don't visit dodgy websites.
5. Changing how JavaScript files are opened:
Find a JavaScript file.


or create one in notepad and save with the code:

Code: Select all

WSH.Echo("Hello World");

Now right click, select open with and then choose another app. Select any text editor like Notepad... and remember to select to ALWAYS use this app to open .js files.

---

Stay safe!

[chekdn]

Wow, Sam! This article is simply educative, I like how you broke it down for proper understanding and the needed solution. You know, this has been troubling me for sometime now, but here I have learned something new and helpful.

Thank you!

[KloeRinz]

Thank you, Sam. I found this article quite enlightening. I will apply what I learned here to protect myself from viruses.

[ahmedo24]

This is great and well detailed information from Mr Sam, I never such things like this exists though I once experienced this few years back when I tried downloading an image, it did download but crash my system immediately, I had to format it.

[chekdn]

This is great and well detailed information from Mr Sam, I never such things like this exists though I once experienced this few years back when I tried downloading an image, it did download but crash my system immediately, I had to format it.

That was bad. This makes it more easier to see every reason why it is good to be security cautious regarding our pc/phones when using them online. We have a lot of negative people online who are hell bent, and they can go a distance just to achieve their goal.

[anish4111996]

dont open any vulgor sites as bcoz much of that viruses are there in that sites.Always use antiviruse .

[akash9804]

use adblocker and antivirus bcoz some of the ads contains viruses which slow down our system.

[ladyninja]

I guess the bottomline here is; do not click on any link from an unknown source. Avoid visiting and downloading from questionable sites and ensure you have a good antivirus program running on your system.

[Little Mage]

Yes Javascript is how they get a lot of people. Especially if you use windows. It's kind of scary to think about but it is true. Better to disable javascripts when visiting lo ts of websites..

[averygirl72]

I downloaded a software from earningmoney.network. It says you will be paid for keeping their software running in the background. Then I found they are super slow in earning I uninstall the program. My antivirus show I have Trojan virus with earningmoney attach to the virus so I now it comes from them. What will this Trojan virus can do to my computer?

[thisnthat]

I downloaded a software from earningmoney.network. It says you will be paid for keeping their software running in the background. Then I found they are super slow in earning I uninstall the program. My antivirus show I have Trojan virus with earningmoney attach to the virus so I now it comes from them. What will this Trojan virus can do to my computer?

It depends on what you are infected with. Trojans generally gather info and send it to the person/entity that infected you (to put it simply).

You might want to try downloading a free malware or antivirus or both to see if you can get rid of it. I'd try Kaspersky.

-- 29 Nov 2017, 20:21 --

Good article, Sam!

[kat82]

Very wonderful! Until today, I didn't know about this option to changing the way js files are opened. I have been relying in the antivirus which has browser extension. Thanks to you for sharing about this. I will try it right away and start enjoying the benefits associated! Bravo