Javascript injection to a .ico?

lots0

Affiliate Guard Dog Member
Joined
Sep 17, 2009
Messages
595
Reaction score
3
Had some asshole in Russia trying to inject this ???

Anybody have a clue as to why?

<html xml:lang="en" xmlns="http://www.w3.org/1999/xhtml" lang="en" xmlns:kikin="http://www.kikin.com/">
- <body>
- <!-- Additional JavaScript injection scope
-->
- <!-- JavaScript Codes
-->
- <script type="text/javascript">
- <!--
// <kikin:script type="template">
var timeBeforeBootstrap = new Date().getTime();
var KikinBootstrap = {};
KikinBootstrap.addHeadElement = function (element) {
var headElement = document.getElementsByTagName('head')[0];
if (headElement != undefined) {
headElement.appendChild(element);
}
};
KikinBootstrap.addExternalJavaScript = function (script) {
var element = document.createElement("script");
this.addHeadElement(element);
element.setAttribute('src', script);
element.setAttribute('type', 'text/javascript');
return element;
};
KikinBootstrap.addInlineJavaScript = function (script) {
var element = document.createElement("script");
element.setAttribute('type', 'text/javascript');
element.innerHTML = script;
this.addHeadElement(element);
return element;
};
// </kikin:script>
//

-->
</script>
- <!-- Programmatical global JavaScript injection
-->
- <!-- HTML Markup
-->
<kikin:extend extensionPoint="extension.top" />
</body>
</html>
 

Aussie-Dave

Former AGD Member
Joined
Nov 24, 2007
Messages
684
Reaction score
3
Hi lots0,

kikin is some type of hub which connects people to a variety of Web2 sites...eg facebook, youtube etc...etc

Whatever the russian git was trying to do looks like the script calls up kikin. I'd be contacting kikin and ask WTF...

try info At kikin or gerald.kropitz AT kikin.com

There is also an affiliate program attached to kikin so maybe the script is something to do with that...

xxxhttp://www.shareasale.com/newsignup.cfm



Cheers

:)

Dave
 
Last edited:

lots0

Affiliate Guard Dog Member
Joined
Sep 17, 2009
Messages
595
Reaction score
3
Thanks Dave.

When I found that it was late and I was tired and did not check it out so well.

It does not appear malicious, it appears it was trying to alter and frame some of my content, not sure why it was after the .ico file. However, it looks like my htaccess code broke it. ;D
 
Top