Exploit:HTML/IframeRef.BG

Exploit:HTML/IframeRef.BG is a detection for an obfuscated exploit that is embedded within a compromised web page. The exploit creates a malicious IFrame into same web page that, when viewed in a web browser, redirects the browser to another site to possibly execute other malicious code.

Installation

Exploit:HTML/IframeRef.BG is encountered when visiting a compromised web page that contains the exploit code. The exploit runs obfuscated JavaScript which generates a hidden IFrame. The IFrame then redirects the web browser to another website that was probably compromised to host other malicious code, such as the Blackhole exploit kit.

At the time of this writing, the link requested by this exploit from the site "n6sd7fg67.creeperface.net" was unavailable for analysis.

Analysis by Wei Li