Flash XSS on typewrite_header.swf

Our lab found a interesting XSS on a .swf file that we later discover was mainly used on phishing websites.

Source code of typewrite_header.swf:

//Frame 3

Safer Internet Day 2016

Today more than 100 countries worldwide, including all 28 countries of the European Union, are celebrating Safer Internet Day (SID) for the thirteenth year running. Initiated under the European Commission’s Safer Internet Programme and now continuing under the Connecting Europe Facility (CEF) which...