JS/Agent.NKW!tr
Analysis
JS/Agent.NKW!tr is a generic detection for a type of obfuscated JavaScript trojan that injects hidden style classes to hide spam links on compromised web sites.
The injected style class is applied to HTML elements with spam links to position them off-screen which makes them invisible to web page viewers.
Recommended Action
- Make sure that your FortiGate/FortiClient system is using the latest AV database.
- Quarantine/delete files that are detected and replace infected files with clean backup copies.
Telemetry
Detection Availability
FortiGate | |
---|---|
FortiClient | |
FortiAPS | |
FortiAPU | |
FortiMail | |
FortiSandbox | |
FortiWeb | |
Web Application Firewall | |
FortiIsolator | |
FortiDeceptor | |
FortiEDR |