Hide and seek with site injections

As we have seen several times before (e.g. Mal/Iframe-Gen, Mal/Iframe-W), compromised sites are often injected with large, heavily obfuscated blocks of JavaScript. The primary goal of such scripts is to make it tough for scanners to detect the payload (frequently an iframe or script load). However, the side effect of large, ugly, obfuscated scripts is  See More..