Better Business Bureau offers rogue script browser peril
Rogue scripts on the scam advice website Better Business Bureau have sparked security concerns.
The issue was brought to our attention by Kevin, a server security consultant who said he informed BBB of the apparent problem on Saturday.
“I noticed a javascript redirect on the BBB Blogs site that seems to attempt to spawn an iframe to download (now deactivated) malware,” he explained.
Kevin reckons the rogue script – captured in a screenshot posted on imageshack here – was still running on the site on Monday afternoon.
“The malware link IS live, but the malware distribution page it’s linking to seems to have gotten shutdown,” Kevin clarified.
The Better Business Bureau was set up to provide small business in the US with advice on avoiding scams so it’s a particular embarrassing place for links to malware to appear.
We exchanged messages with the Better Business Bureau on Monday afternoon and understand these messages have been passed on to the site’s technicians. We’ll update this story as and when we hear more. ®
Article source: http://go.theregister.com/feed/www.theregister.co.uk/2011/10/03/bbb_rogue_scripts/