Chenette, manager of security research at Websense, has dubbed the new attack vector "script fragmentation" and will be making a presentation on it next week at the PacSec Applied Security Conference in Japan. Though he was mum on the specific details of his research, he provided eWEEK with a general outline of his findings.

His attack method is reminiscent of TCP fragmentation attacks and involves breaking down Web exploits into smaller pieces and distributing them in a synchronous manner to evade signature detection. According to Chenette, the attack can be performed without any special tools or add-ons.

“There’s no big chunk of maliciousness to it [where] there’s enough information there that anybody who’s looking at it, either signature or [with behavioral analysis], will really make any sense of it to say, ‘this is malicious,’” he explained.

Read the rest of this article on eWEEK.com.