[JS/Agent.OZD trojanAccess Detection]

On 6/10/2022 at 4:30 PM, Marcos said:

Infected files are in the /support/theme/hesk3/customer/js folder. Searching for "if(ndsj===undefined)" should help you locate the malicious JS.

Yes, all sorted!  Many thanks for your support!

[JS/Agent.OZD trojanAccess Detection]

Hi, ESET has just started to report JS/Agent.OZD threats on website www.ariadnesoftware.co.uk.  Most of this site is intentionally redirected to a newer site, but a few pages are still in use (example URL: www.ariadnesoftware.co.uk/support).  I tried scanning the site with quttera.com but no malicious files were found.

Any pointers to the nature/location of the threat would be most welcome.