Javascript may be the next language of choice for malware, according to security researcher Itzik Kotler of Radware.

Kolter demonstrated an attack, dubbed Jinx, that takes advantage of a hole in Javascript that allows a hacker to copy any file from a user's PC. The attack is virtually undetectable because no browser binary is altered, but rather plain HTML code is added into just one specific file, reports vnunet.com.

While Kolter says the Jinx hack is not yet in the wild, HP's Billy Hoffman says attackers have been using JavaScript apps to capture keystrokes. And a JavaScript tool called Middler lets hackers bypass Web security authentication on certain banking, e-mail and social networking sites.