Large-scale JavaScript attacks reported

**Glaswegian** · 04-24-2008, 02:08 PM

Large numbers of legitimate websites, including government sites in the UK and some operated by the United Nations, have been hacked and are serving up malware, a security researcher said Wednesday as massive JavaScript attacks last detected in March resume.

"They're using the same techniques as last month, of an SQL injection of some sort," said Dan Hubbard, vice president of security research at Websense, referring to large-scale attacks that have plagued the Internet since January.

Among the sites hacked, said Websense, were several affiliated with either the UN or UK government agencies.

The exact number of sites that have been compromised is unknown, said Hubbard. He estimated that it's similar to the March attacks, which at their height infected more than 100,000 URLs, including prominent domains such as MSNBC.com.

http://www.techworld.com/security/ne...S&NewsID=12082

Lwilliams · 05-13-2008, 03:13 PM

Interesting read. Les.

04-24-2008, 02:08 PM	#1 (permalink)
Glaswegian Moderator/ Rangemaster TSF Academy; Analyst, Security Team; Oor Wullie; TSF Surgeon and Resident Comic Join Date: Sep 2005 Location: Glasgow Posts: 25,482 OS: Win XP Pro SP3 / Win 7 Pro My System Blog Entries: 10	Large-scale JavaScript attacks reported Large numbers of legitimate websites, including government sites in the UK and some operated by the United Nations, have been hacked and are serving up malware, a security researcher said Wednesday as massive JavaScript attacks last detected in March resume. "They're using the same techniques as last month, of an SQL injection of some sort," said Dan Hubbard, vice president of security research at Websense, referring to large-scale attacks that have plagued the Internet since January. Among the sites hacked, said Websense, were several affiliated with either the UN or UK government agencies. The exact number of sites that have been compromised is unknown, said Hubbard. He estimated that it's similar to the March attacks, which at their height infected more than 100,000 URLs, including prominent domains such as MSNBC.com. http://www.techworld.com/security/ne...S&NewsID=12082 __________________ Iain - Defender of the Haggis and all things Scottish. I don't help by PM - post in the Forums. PC Safety & Security::PC running a bit slow?::Donate::Photographers Corner

05-13-2008, 03:13 PM	#2 (permalink)
Lwilliams Registered User Join Date: May 2008 Posts: 1 OS: xp	Re: Large-scale JavaScript attacks reported Interesting read. Les. Last edited by Glaswegian; 05-13-2008 at 03:18 PM.