IT Jobs
Web hack hits thousands of users
Up to 10,000 servers could be hit by Trojan.
By Robert McMillan, IDG News Service
Published: 14:30 GMT, 10 November 08
Up to 10,000 servers have been hot but by a massive hacking attack according to security vendor Kaspersky Lab.
hHackers have launched a massive web hacking campaign, putting malicious links on as many as 10,000 servers, security vendor Kaspersky Lab warned Friday.
"We're estimating that in the last two days alone, between 2,000 and 10,000 servers, mainly Western European and American ones, have been hacked," Kaspersky wrote on its website, "It's not yet clear who's doing this."
The attackers are most likely using compromised accounts on the websites or launching what's known as a SQL injection attack, where hackers trick the Web site's software into inadvertently running malicious commands.
The criminals add a line of JavaScript code onto the hacked sites that redirects victims to one of six servers. These sites, in turn, redirect the visitor to a server in China. That server can launch a variety of attacks, targeting known flaws in Firefox, Internet Explorer, Adobe's Flash Player and ActiveX, Kaspersky said.
If the victim's computer hasn't been patched, the attack code could install a variety of spyware and Trojan horse software, including one program designed to steal World of Warcraft passwords.
These attacks have become fairly common this past year, according to Roger Thompson, chief research officer with AVG Technologies. "These guys are pretty busy," he said via instant message. "We see them a lot."
Judging from their techniques and from his previous research, Thompson believes the attackers are college students based in China and that they may be the same group that notoriously hacked the websites of the Miami Dolphins and Dolphin Stadium ahead of the 2007 Super Bowl football championship.
Earlier this year, a similar attack compromised more than 1.5 million web pages, Kaspersky said. "Things are still developing, and the similar nature of the malicious programs used in both attacks lead us to think that this new wave of attacks is potentially pretty serious."
Add your commentComments
Recommend Search-and-destroy Antispyware to anyone | Published: 08:40 GMT, 15 December 2008
I would like to recommend Search-and-destroy Antispyware to anyone that wants a good scan for their computer. I tired many other scanners in the past but so far I like this one the best. It’s cheaper than many of the others and it cost less. What more can you ask for? The antispyware solution from Search-and-destroy found at http://www.Search-and-destroy.com/antispyware.html is a great option whether you use your computer for work or personal use. It will keep it clear and clean of antispyware that bogs down your PC and causes it to be sluggish and annoying.