JS script automatically being added to Rich Text Boxes

[Pepe_Serralvo]

Hi everyone,

We have been experiencing an issue lately, in the edit mode for Emails or Landing pages, when editing Rich Text Boxes, JS scripts are being added to the code automatically.

Example: script type="text/javascript" async="" src="interjoan.com/22507747faf43c0555.js"

Not all our editing users are experiencing it.

Did anyone experience this before?

Thanks!

[Oz_Platero]

@Pepe_Serralvo ,

What does the template look like for those sections?

[SanfordWhiteman · Accepted solution]

This is malware. Please PM me immediately (I almost never say that) so we can get on a screenshare. 

[Nicholas_Manojl]

What was it? A generic extension that worked with a tinymce or something targeting Marketo?

[SanfordWhiteman]

An Adware injector that actually isn't intended to target editable content like TinyMCE. It's supposed to just inject content into live pages (i.e. temporarily) - although I'm sure its authors are delighted that it can permanently alter pages if a person is infected and uses a page builder.