[Techtalk] is this malicious code? -- the code in Pastebin

Cynthia Kiser cnk at ugcs.caltech.edu
Tue Jan 15 23:28:42 UTC 2013


Quoting Carla Schroder <carla at bratgrrl.com>:
> > > I have a snippet of a Javascript ad that Google flagged as
> > > malicious. 
> 
>
> http://pastebin.com/NvTGxDQd

Not exactly sure but I am guessing Google is twigging on either
wrapping JS in the CDATA block OR the constructing the penultimate
script tag with:

document.write ("'><\/scr"+"ipt>");

Seems like you are trying to pass JS but delay execution thereof. I
don't think that makes this malicious - but does make me curious.


-- 
Cynthia N. Kiser
cnk at ugcs.caltech.edu


More information about the Techtalk mailing list