TF-MAL-js.parrot_tds

Description

ThreatFox malware family `js.parrot_tds`. Printable name: Parrot TDS.

Indicators of Compromise (0)

No indicators of compromise on this threat.

References (1)

• ThreatFox: IOCs for this family ThreatFox Malwares

• Parrot TDS Malware Campaign Exploits Websites through ... - Advisories
  web:advisory.eventussecurity.com

  The insights provided by researchers contribute to the understanding of Parrot TDS and assist in developing strategies for detection and mitigation against this long-standing threat. Threat Profile: References: The following reports contain further technical details:

  2026-05-22 05:26 UTC
• Parrot TDS: Understanding the Payload Distribution
  web:cybernext.ai

  This blog explores the threat of Parrot TDS , a cyber campaign leveraging dynamic code injection into JavaScript on compromised sites to redirect visitors to phishing or malware . Learn about its methods, from exploiting CMS vulnerabilities to delivering malicious payloads, and discover actionable defenses for enterprises.

  2026-05-22 05:26 UTC
• Parrot TDS WebShell (Malware Family) - Fraunhofer
  web:malpedia.caad.fkie.fraunhofer.de

  Parrot TDS WebShell Propose Change In combination with Parrot TDS the usage of a classical web shell was observed by DECODED Avast.io.

  2026-05-22 05:26 UTC
• Parrot TDS: A Persistent and Evolving Malware Campaign
  web:note.f5.pm

  This injected script consists of two components: an initial landing script that profiles the victim, and a payload script that can direct the victim's browser to a malicious location or piece of content. To help the reader better understand Parrot TDS , this article provides in-depth analysis of the landing scripts and payload scripts we have collected from this campaign.

  2026-05-22 05:26 UTC
• Parrot TDS: A Persistent and Evolving Malware Campaign - Unit 42
  web:unit42.paloaltonetworks.com

  Traffic detection system Parrot has infected tens of thousands of websites worldwide. We outline the scripting evolution of this injection campaign and its scope.

  2026-05-22 05:26 UTC
• Malicious web redirect scripts stealth up to hide on hacked sites
  web:www.bleepingcomputer.com

  Security researchers looking at more than 10,000 scripts used by the Parrot traffic direction system ( TDS ) noticed an evolution marked by optimizations that make malicious code stealthier against ...

  2026-05-22 05:26 UTC
• Millions at Risk As 'Parrot' Web Server Compromises Take Flight
  web:www.darkreading.com

  Millions at Risk As 'Parrot' Web Server Compromises Take Flight The cyberattackers behind the traffic redirection system ( TDS ) inject websites with malicious scripts, have control over thousands ...

  2026-05-22 05:26 UTC
• Parrot TDS Infects 16,500+ Websites for Malware Distribution
  web:www.sangfor.com

  Parrot TDS - Traffic Direction System infected 16,500+ websites for malware distribution. Here are recommendations and remediations by Sangfor.

  2026-05-22 05:26 UTC
• Parrot TDS: A Persistent and Evolving Malware Campaign
  web:www.tech.imorlando.com

  A traffic direction system ( TDS ) nicknamed Parrot TDS has been publicly reported as active since October 2021. Websites with Parrot TDS have malicious scripts injected into existing JavaScript code hosted on the server. This TDS is easily identifiable by keywords found in the injected JavaScript that we will explore to show the evolution of this threat. This injected script consists of two ...

  2026-05-22 05:26 UTC
• Malware Delivered via jQuery Migrate and Parrot TDS
  web:www.trellix.com

  Background: What is Parrot TDS ? Parrot TDS (Traffic Direction System) is a sophisticated toolkit used by cybercriminals to reroute victims through layers of filtering, fingerprinting, and payload delivery. It's often injected into compromised websites, selectively delivering malware to users based on their device, browser, or referrer.

  2026-05-22 05:26 UTC

Only Available for Registered Users. Sign in to view.