Malicious JavaScript Obfuscation - JSFireTruck and Referrer Check

Robert Fly@robertfly

•updated Jun 23, 2025•1•34

Detects potential malicious JavaScript obfuscated using the JSFireTruck technique, specifically looking for the combination of core JSFireTruck characters and checks for document.referrer, often used to target traffic from search engines.