02 Malware Polyfill.io detected on Payments page-

[Kreba]

Logged in, to check balance then looked at add balance payments and immediatly my malware detection program found cdn.polyfill.io code trying to inject itself into my browser JS . seems your website has a problem - The JavaScript CDN service Polyfill.io is being used for spreading malicious code redirecting users to third-party websites

[Bambino]

@Kreba This is not O2. This is a customer community. I will tag our community manager.

@Kei-M_O2 can you please look into this?

[Kreba]

I went the Contact us route to see if I could send an email about the malware detection however the only Help and Support links are about accounts, devices and contracts nothing about the website itself, So I tried with asking a virtual assistant which brought me to a screen where it said start a discussion which brought me here. So I take it that theres no way to report this - other than here?

[Bambino]

@Kreba All ways to contact O2 can be found here: How to find help & contact O2: A Guide - O2 Community

I don't know how much good that will do to help you.

[bhaskarsamani]

contact o2 on 0344 809 0202 

[Kreba]

Took some digging, after many redirects and rabbit holes I've found the CyberSecReport@o2.com and posted there, Whether it would help or fix anything, I don't feel safe going to the top up page anymore from news articles from just a few months back shows the Polyfill-io supply chain attacks affecting payment sites I'll just top via voucher instead. 

[pgn]

A bit of background on this particular threat, for info:

https://blog.redsift.com/news/understanding-the-polyfill-io-domain-attack/

[Kei-M_O2]

Thanks all, I've raised this with one of our security teams to investigate. I'll let you know if we need any further information in the meantime.

[Kei-M_O2]

@Kreba can you give me a link to the page?

[Kreba]

@Kei-M_O2  Site URL - myo2payg.o2.co.uk - detection program found a redirect script from cdn.polyfill io - It's the top up page so https://myo2payg.o2.co.uk/webtopup/details?journey=signedIn&disambiguation_id=a926f33b-cf9b-44f0-bf5...