CA among victims of major attack linking sites to malware.
Huge numbers of legitimate websites – perhaps as many as 100,000 according to some reports – fell victim to hackers over the last couple of weeks thanks to SQL injection problems leaving sites vulnerable.
The hacks redirect traffic to sites in China, where click-fraud is used to turn the traffic into profits, and also attempt to drop data-stealing malware onto vulnerable systems.
Starting on December 28th, hackers probed sites for vulnerability to the hack, which may have been caused by some faulty SQL code on sites created using
Dreamweaver
. The tide of compromises began to go recede around January 5th, but many sites are thought to remain unpatched. Among sites affected are major corporations, including security firm
CA
– which is thought to have had an infected site for a brief time – government agencies and educational institutions.
More detailed reports of the rash of hacking are in
The Register
here
and in
Information Week
here
.
Posted on 08 January 2008 by
Virus Bulletin
Leave a Reply