RomCom Threat Actor Suspected of Targeting Ukraine's NATO Membership Talks at the NATO Summit

What you'll learn

• Function f1() changes the content of the div with ID “d1” with the content “ ! ”. Then, it waits 1.3 seconds before calling the function f1a() .
• Function f1a() changes the content of the div with ID “d2” adding a new iframe with the content of the file hxxp://74.50.94[.]156/MSHTML_C7/zip_k.asp?d=99.99.99[.]99 . When it’s loaded, it waits 1.3 seconds before calling the function f1b() .
• Function f1c() changes the content of the div with ID “d3”, adding a new iframe with the content of the file hxxp://74[.]50.94[.]156/MSHTML_C7/zip_k3.asp?d=99.99.99[.]99 . When it’s loaded, it waits 1.3 seconds before calling the function f2() .

Topics covered