Half a million sites hit by huge web hack

**Glaswegian** · 04-28-2008, 02:28 PM

Attacks on legitimate web domains, including some belonging to the United Nations that began earlier this week, have expanded dramatically, security researchers said Friday, with hundreds of thousands of pages hacked by Friday.

One anti-virus vendor said the sites might have been compromised through a "security issue" in Microsoft's web server software that has been reported to Microsoft's engineers.

On Wednesday, several security companies, including California-based Websense, said large numbers of legitimate sites, including URLs for the UN, had been hacked and were serving up malware. These latest site compromises were only the most recent SQL injection attacks, however, similar attacks have been launched since the first of the year, and were last detected in large numbers in March.

http://www.techworld.com/security/ne...S&NewsID=12100

pie4himm · 05-13-2008, 09:53 PM

I can't surf to CastleCops?, has CastleCops website experiencing a DDoS attack again?

tetonbob · 05-15-2008, 08:58 PM

@pie4himm -

No, it was a hardware issue.

04-28-2008, 02:28 PM	#1 (permalink)
Glaswegian Moderator/ Rangemaster TSF Academy; Analyst, Security Team; Oor Wullie; TSF Surgeon and Resident Comic Join Date: Sep 2005 Location: Glasgow Posts: 207,090 OS: Win XP Pro SP3 My System Blog Entries: 9	Half a million sites hit by huge web hack Attacks on legitimate web domains, including some belonging to the United Nations that began earlier this week, have expanded dramatically, security researchers said Friday, with hundreds of thousands of pages hacked by Friday. One anti-virus vendor said the sites might have been compromised through a "security issue" in Microsoft's web server software that has been reported to Microsoft's engineers. On Wednesday, several security companies, including California-based Websense, said large numbers of legitimate sites, including URLs for the UN, had been hacked and were serving up malware. These latest site compromises were only the most recent SQL injection attacks, however, similar attacks have been launched since the first of the year, and were last detected in large numbers in March. http://www.techworld.com/security/ne...S&NewsID=12100 __________________ Iain - Defender of the Haggis and all things Scottish. I don't help by PM - post in the Forums. Ad-Aware::SpywareBlaster::SpyBot::SpywareGuard::SnoopFree::AVG Free::HOSTS File::HijackThis::Donate::5 Steps For Infected PCs

05-13-2008, 09:53 PM	#2 (permalink)
pie4himm Registered User Join Date: Jun 2007 Posts: 17 OS: XP	Re: Half a million sites hit by huge web hack I can't surf to CastleCops?, has CastleCops website experiencing a DDoS attack again?

05-15-2008, 08:58 PM	#3 (permalink)
tetonbob Manager, Security Center, TSF Academy; Analyst, Security Team Join Date: Jan 2005 Location: Transylvania County, North Carolina, USA Posts: 23,765 OS: 2000 Pro; XP Pro; XP Home	Re: Half a million sites hit by huge web hack @pie4himm - No, it was a hardware issue. __________________ Practice Safe Surfing PC Safety and Security--What Do I Need? Proud Member of ASAP since 2005 Proud Member of UNITE since 2006 Our help is voluntary, but this site needs donations to operate. Please consider Donating to the Forum. Please do not ask for help via Private Message. Ask in the forums, so all may gain from the experience.