dxp wrote:
> You forgot to mention another good signature "Javascript_NOOP_Sled". It
> used to provide decent detection about a year ago, now it's useless
> against obfuscated code.

And it was very easy to guess it would end like this.

Generic "shellcode" signatures worked only as long as the bad...

[ more ]